[dnanian]

Well, it does run with a cron job, just a user level one. If you enable the root user and schedule with them, it will run at the login screen, but that's more of a security risk...

Note, too, that a screensaver lock is basically done with the loginwindow process, so it's just as secure. And if the user is unprivileged, they can't really do anything should they break that level of security. (And, if they can break that security, they could log in anyway.)