KRACOEUS-8356:added lock description to pessmistic locks

seems like there should be a better place to do this.  I don't like this here because it isn't related to authorization.  Instead you are using as a hook into the KRAD request/response lifecycle