OK, no more locking except within find_or_create_by, because that can't be done by the user.