Your team stores Terraform state in an S3 bucket configured as a remote backend. Two engineers run 'terraform apply' against the same configuration at nearly the same time. You want to guarantee that only one apply can modify the state at a time to prevent state corruption. Which addition to the S3 backend configuration accomplishes this?