committing Cargo.lock seems like a good idea