builder/docker: lock around Login