OK. I guess what happens is, that the screen is only locked during the "resume" event, not during the "suspend" event (which is somehow signalled via dbus). Or that it simply takes too long to lock the screen after signalling xscreensaver (which is the default). I'll try to debug this in xfce4-power-manager when I find some time.