Secure import/export & callback entry points with locks