- log inside the lock, so we get proper serialisation - include the container name, so we can identify the specific entry