AFAIK there is no way of relocking the bootloader as of now. I'm sure it'll be possible one day, but the T-Mobile version has only been out for a couple of months and the At&t version just came out this week.
I'm not rooting my At&t version I just got this week because I don't want to void my warranty. I haven't tried to theme anything yet though.