policy: only disable power menu on secure lock screen