I checked with the porting team reg this…the response is not all devices allow locking with a custom ROM. The Fairphone are an exception and allow locking the bootloader. The Teracube 2e does not. We expect to be able to lock the bootloader on the Teracube emerald soon and will share the instructions with all users.