i guess since we already don't really allow for concurrent access at this point, one big lock would be ok for now