Move PasscodeManager locking to its own lock object