pulse: allow locks for system-wide cookie