This is an xlock binary with included app-defaults that works with shadow passwords. /etc/shadow should be mode 440 and group shadow, and xlock should be mode 2755 and also group shadow.