In the meantime, it's possible to start xlock with -cpasswd option to still make use of xlock. `openssl passwd` will generate the needed argument.