Encryption is an awesome start, thank you @opensource21 and @gsantner for getting this in. For me, this was a critical feature.

The existing feature addresses the data at rest encryption. This feature request is to make "locking" easy. This allows one to let someone else use their phone for a few minutes, unsupervised, without fear that private

Specify a log prefix in the systemd services so the logs from each service can be differentiated in /var/log. Right now, all of them appear as docker.

This can be done by adding the SyslogIdentifier parameter (see https://unix.stackexchange.com/questions/192650/how-to-set-syslogidentifier-in-service-section-of-systemd-service-file-as-emptz).