Project lock

Implements logic for locked projects and contrib keys per #1123