Add core app routes for setting public/private
Add static unlock button
Implement lock/unlock
Ensure cache control must-revalidate is set