implement fancy devlock as we did on MacOS, for now