Add arbitrary resource locking (named locks).

It's complementary to current device locking. It'll be used
for mutual exclusion of two or more reencryption resume processes