s3: Add strict lock/unlock calls to the vfs layer to replace is_locked