Since the lockbutton doesn't have a changed signal, connecting to it doesn't help... directly listen for changes of the permission object instead.
Copied from the accounts-dialog git module.