lock parentrol when checking users (to avoid double checks esp. @reboot)