the deploy.lock must be used by root