I'm trying to develop a workflow to handle a custom record I've created for reporting when equipment is broken.  After a user creates a new record the workflow enters the state "Lock-out/Tag-out".  This state can only be completed by someone with the QA Manger role, so I wanted to lock the record incase other users attempt to edit it.  I added the lock record action to this state in an attempt to lock the record for anyone that is not a QA Manager:

Action: Lock Record
Trigger On: Before Record Load
Condition: User Role != QA Manager

This fails to lock the record.  If I remove the condition then the record locks for all users but with the condition in place it doesn't lock for any user.  I've also tried 2 different custom formula conditions (instead of the visual builder) for this action and experience the same problem: