Add a invirt.authz.locker module to invirt-base for XVM-style