adds locks on modifying access rules