crypto/qat: add lock around CSR access and change logic