The REST verb LOCK prevents changes to a resource, e.g. verb:patches. It is exclusively applied to data and databases. The key trade is concerned with locks of a less abstract kind, which enforce the abstraction or command verb expressed by the verb:lock.
No means to verb:authenticate is required, as it can be considered an atomic combination of REDIRECT/LOCK/PUT (assuming one attempts to do something and then must login or otherwise authenticate - see verb:try for more on this general class of non-deterministic events, and redirect/lock/put for the general pattern.