What does the statement of 'Allow Call if Security Server down' mean?

I assume this means that if the C9600 can not contact the Radius Server, that it then looks at the local user database (userlist.cfg). Is this correct?

If you enable this option then RAS will allow the user to connect if RADIUS does not reply.
It doesn't check the local database first.