preferable to delete the account, rather than disable, as reenablement through some exploit is possible