Move XVM's locker authorization code into a separate xvm-authz-locker