lock around config file checking