rules: checksum: uses a FileLock for an output file