diff --git a/modules/security/onLock.sh b/modules/security/onLock.sh
new file mode 100755
index 0000000..fb64361
--- /dev/null
+++ b/modules/security/onLock.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+read -r uid < /proc/self/loginuid ||:
+chown -h "$uid" "$(tty)";
+exec sudo -u "#$uid" -- vlock -a