forget it. I just did it.
I tried to simulate the sent request when I do suspend on the user profile page, but failed.
not sure if I add api_key in Authorization header will make this work.
most important, I want the suspend_reason and suspend_message be set.