After backing up the registry, rename the Symantec Overlay Keys so they appear at the top of the Overlay list.
They are sorted alphabetically.
Once this is done, a reboot may be required for the lock icon to appear on the RME.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellIconOverlayIdentifiers
AND create this 2nd key if it is missing.
HKEY_LOCAL_MACHINE\SOFTWARE\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers