Thanks EarlyMon. Syd I think it is good news. Maybe Samsung have rushed out so many similar firmwares, seemingly different for different regions only, that they've tacked on this Knox to patch the security holes and they are going to patch it properly later. The only thing that concerns me is the patch is floating around Google anyway, why does the bootloader need to be locked? The good news is it is Samsung, the patch is out there and we've already got a rooted ROM minus Knox.