systemd service to lock screen when sleeping

See <https://unix.stackexchange.com/questions/149959/how-to-run-systemd-user-service-to-trigger-on-sleep-aka-suspend-hibernate> for follow-up on why this only works as a system service for now.