refs.c: make lock_ref_sha1 static