Move X11 handling into its own file.
Add --x11-trusted and --x11-timeout options.

The new default is to use an untrusted X11 cookie and a 60 second
timeout.