tests for `locked routes` feature