Remove unauthenticated wakeup support again.

It was a security hole due to suspend interaction. Let's rather not do
that, and instead provide the same feature via xss-lock's -n option.

Salvage the xss-lock supporting parts to instead inhibit suspends until
the screen is actually blanked - this prevents some information leaks.