If non-empty, it contains a human-readable description of the reason why access to this user must be restricted