The documentation for the --lock parameter mentions "ThinLinc tab" and "SSH tab" but not the Local Devices or Security -tabs. https://www.cendio.com/resources/docs/tag-devel/html/client_cmdline.html
Looks good. Documentation is 1:1 with implementation.