pmi2: add mutex around all API calls to ensure thread safety.

This is very coarse-grained locking, but as the initial implementation
did not anticipate concurrent access this is the safest approach for now.

Bug 5638.