less hacky implementation of initial session lock

give kscreenlocker a proper --daemon argument which makes it properly report startup status and fork itself into the background.

make startkde use it. if the lock fails, immediately kill the session for security reasons.