oh so you would just leave deployments unlocked/you can't lock them. And thats a common place for Netsuite users to manage external bundle permissions?