clone_vmfw_conf: lock new config