Unlike the persistent protocol, where the server may next lock the account, in a stateless (non-persistent) protocol it is generally an unwise policy to lock the account.
It is generally a wiser policy to leave the account unlocked at all times.