add unlock to cloud-init scripts