could we just be able to disable the user and not delete