[Unit]
Description=Lock screen before suspend
Before=sleep.target
[Service]
User=%I
Type=simple
ExecStart=/usr/bin/xautolock -locknow
[Install]
WantedBy=suspend.target