phase1: provide upload/download locking