Add lockedAt to database, DB layer and exposed API

Good call.