/usr/bin/security authorizationdb read system.login.screensaver >/tmp/originalss.$$ /usr/bin/sed 's/use-login-window-ui/authenticate-session-owner-or-admin/' /tmp/originalss.$$ >/tmp/newss.$$ /usr/bin/security authorizationdb write system.login.screensaver </tmp/newss.$$
The contents claim that this is still the way to do it but locking the screen never gives a dialog just black with cursor.
The owner or any administrator can unlock the screensaver, set rule to "authenticate-session-owner-or-admin" to enable SecurityAgent.
