Update Lock.php

if you return false you say that it is not allowed by default, you use a whitelist approach.
if you return true they are allowed by defualt, you use a blacklist.

whitelist > blacklist