proxy-exec: manage proxies at lock/unlock time