[PATCH] remote: add missing lock guard for secret value API