lock around accesses to uidinfo and varsymset