add lockbox, write test