puppet lock for st3