bin/lock: use bash, otherwise case in defaults doesn't work