I would've assumed lockfile-by-default. We're still going with auto-updating?