how can I lock my bootloader?

running latest vzw firmware

i am returning a device and would like to get back close to stock as possible. mainly i would like to get my bootloader locked and if possible s-on

is there some kind of command i can run to reset a flag that will achieve this?

also how do i get my bootloader to say 'official' and not 'modified'