ncm-spma: check the locked packages with wildcards

If we come with a fast enough imlementation, I'd make `$fullsearch` the only option.