don't shutdown at autologout.
i chose "logout only" instead of the default action based on the idea that the default is just a default while this is something that will happen without the user having a way to influence it. if it turns out to be a problem for somebody, a config option can be added (yay, another one!).