Make locking VFS methods mandatory

[carlsverre]

This will result in an incompatible release, but will make it less of a footgun to use. If users want existing behavior, they can stub back in the default methods.