You could also instead use security/vlock as another option.If you run X via startx, someone who walks up to your desk and manages to kill your X session or switch to virtual terminals gets a shell with your account logged in. Starting X via XDM (or whatever login manager you prefer) prevents this.