bind-add-zone: protect file with s_state_lock