Yes you can root a phone with a locked bootloader but that does not mean you can just overwrite/remove install-recovery.sh to allow to install and keep a non stock recovery.
EDIT: You can edit the .sh but an alternate recovery wouldnt be signed so wouldnt come up with a locked bootloader. So imo because they could boot to cwm their bootloader likely isnt locked.
EDIT: Unfortunately the closest I fiound to verizon was the 120s I mentioned.
But I have seen instances where updates were tricked into believing a device was stock by using /system from another device. Have to find where I saw that one...
---------- Post added at 06:29 PM ---------- Previous post was at 05:46 PM ----------
I am going to try all this tonight with the verizon one. Wanted to last night but killed my battery finding root (and with the verizon demo app that I dont want to stop until I am sure it wont break it).
Look first, post second. Stop guessing.