Can you explain what you mean in terms of 'locking' them?
Like a mobile phone you mean?
I am not aware of a pin code unlocking with Cisco phones but you could use Extension Mobility and ensure each user logs out every time.
Another option would be a forced authorisation code so each user would need to put in a code (i.e. pin) before they dialed a number.