Refactor process group handling into a common place.

Also, add a signal handler for SIGTERM everywhere so killing xsecurelock
takes its children with it (and returns exit status 1).