cargo publish supports --locked when deterministic builds are desired and it would be nice to propagate this option to cargo workspaces too. Should be straightforward to add and happy to do it just wanted to check that you would be okay with that first