add reattach-to-user-namespace and ensure that screensaver requires
password instantly