change some permissions

lock is moved up to @ (per Riles' suggestion), crashfixed is given to &