Consider making lock config only on writes instead of on rules

[ecordell]

Right now, a config rule specifies the locking mode, but it's only ever used for writes. We should consider if we want to make locks useable in other operations, or if the config should be only on write blocks.