fix(setup) Add locking branch if missing when first locking an object

There is a check at login but we want to be able to lock config object
 from setup, before any login attempt.

issue #2895