--lock-securebits feature