mark CustomerSource's lock as explicitly internal