pkg create only needs a readonly lock