- gss_xxx routines acquire lock, gssXxx don't