locked unprotected controllers