Lock update to single process, so it doesn't conflict with manual runs