Just managed to lock myself out of a 501; no console access, no pdm access, and no telnet/ssh access. Went through the whole password recovery routine, but in that mode, the PIX could not even ping its own inside interface. You can already guess that...