add locks to mixlib-shellout and mixlib-config deps