Create user-accounts with disabled password but ability to set it?

Question

I want to create a user with a disabled password (so that he can not login with password). After creation I add a public-key so as to allow for ssh login with key authentication