Additional paranoia: arm not just a MONOTONIC but also a REALTIME timer, and forbid unauthenticated wakeup when either expires.
Additional paranoia: arm not just a MONOTONIC but also a REALTIME timer, and forbid unauthenticated wakeup when either expires.

This prevents unlocking when the computer was sleeping while the timer was running.

google/xsecurelock,google/xsecurelock