Add lock to calibration method

There isn’t any need for locking here, but the server handlers lock
access to the hwrng, so the calibration method should do it too. It may
behave differently when uncontested though.

So, testing is required to see:

* Whether locking is even necessary in the server
* If it’s necessary, whether the lock introduces enough overhead to
matter when contested by 2+ clients