Use mlock() to lock anything private to memory.

This partially mitigates leakage of passwords to swap.

Note that information about the password from the X11 event queue, as
well as leakage on suspend-to-disk, may still be leaked.