use flock for stale lock file handling

[jomat]

Possible solution for #813

$LOCKFILE isn't necessary anymore since flock can use $CERTDIR or even the script itself $0 for locking, but is kept for backward compability.