Control: -1 severity critical I can reproduce the problem.
I believe the impact of this bug is strong, not being able to lock the screen on demand may be considered a [physical] security problem.
Thankfully the fix is trivial, just add the missing dependency to d/control.
