Restructure how force-grabbing works.

The only functional difference is that in XSECURELOCK_FORCE_GRAB=1 mode,
the new code will be holding a server grab while grabbing input even if
it detected another xsecurelock instance.

However, this difference is minor, and makes the code a lot more
readable.