README.md: add TODO about exposing lock APIs

Signed-off-by: Colin McCabe <cmccabe@alumni.cmu.edu>