mailbox.auto ignores dovecot-uidlist.lock

I'm trying to lock down a maildir from modifications using dovecot-uidlist.lock, but when a user with mailbox.auto = create logs in, then the folder is created regardless of dovecot-uidlist.lock existing or not.

Is there no way to prevent dovecot from touching anything in a maildir folder?

-- Tom