[Unit]
Description=Lock session

[Service]
Type=simple
ExecStart=/usr/bin/loginctl lock-session

[Install]
WantedBy=default.target