ncm-spma: check the locked packages with wildcards

I'd rather do

```perl
if (@$wanted_locked) {
```
it looks more idiomatic to me.