Comment 4 for bug 1688337

I was able to reproduce by adding a second user to openstack, adding those credentials to juju for add-model and deploy a few charms. You can then do a `openstack user set <username> --disable`

Side note: OpenStack docs, mention that with a 401 error, to retry the username/password in case the token is expired.