install: use Cartridge.lock if it exists