tmux: Set lock-command to vlock

* Makes the lock-session command useful
shell_env: Use keychain

* Use keychain if present, otherwise silently fail.