Block a user
Add hold-door web form with proper authorization
Handle keep_open_until: cancel, periodic poll, thread safety
Compute keep_open_until in /allowed + 9 bugfixes