Can now lock all API calls - separate locking around sp_session_process_events.