Add a TODO so that killing saver on auth exit doesn't stay permanent.

We only do this in order to restart the blanking timer; if savers
implemented a different protocol for this (e.g. SIGUSR1), this could go.