Ok I thought that this is it, but for my cubie this is set to 1 (nis.unlockedLimit = 1) but still other people could connect to my NIS and use it for doing transactions. So.... is that a bug?
I don't think that's the right limit. I think unlocked is for harvesting or even neither of the two.