Problem: the locked.csv is awkward to deploy and should be part of the binary

[robinbb]

... results in awkward unnecessary addition of things like:

--locked-supply-csv "$SRC"/data/locked.csv \

lines on invocations, plus the need to deploy that to some known location somewhere on the target machine.