pam_tally + flock

Hi All,
How does pam_tally keep the its database (user invalid attempts count,
timeout,..)in a consistent way from several processes(telnet, ssh,..)
attempting to update it.
It doesnt seem to be using flock before updating. Please let me know
if i have missed something

Regards,
Pavan.