how is it locked? the server won't redeem it without a signature and the npub or can't spend it without a signature from the nsec