When a desktop session is terminated we should
- unmount all devices that the session in question mounted
- lock all LUKS devices that the session in question unlocked
for security / privacy reasons. ConsoleKit is able to tell us when that happens.
See http://bugzilla.gnome.org/show_bug.cgi?id=574566 for more details.