Lock config var when sandbox state is locked