only root can block puppet and the lock cannot be empty