start providing configurable option for locking down arbitrary reads/writes