An employee has left the company. Per policy, you must immediately prevent the user 'jsmith' from logging in via SSH password or console while preserving all their files and home directory for later review. You do not want to delete the account or set an expiration date. Which command accomplishes this most directly?