ncm-spma: check the locked packages with wildcards

i'd like to run this in the wild for a bit and see if this is an actual issue before going for a more complicated implementation