This needs a comment, it's weird to be setting `@lock_gems` alongside `@locked_gems` and intuitively feels like a bug (even if it isn't)