Ok. Can we still move to pipe as it seems whoever calling the lock code on the web app is using the pipes? Wouldn't mind to keep it consistent. What do you think?

We might receive user input and not sure what could happen if someone mallicious would try to inject data that breaks the insertion on a key? Does that make sense?