Usage:

tnservice -M -r realm -s service -a login-control={allow|deny} username...