At least one bit of spmprotect.sh expects vdsm to hold (no more than) a single spm lock. This is going to change when vdsm may hold several sdm locks that need to be protected. This is a subfeature of the architectural change of forsaking spm.
Closing old bugs. If this issue is still relevant/important in current version, please re-open the bug.