So I want to lock on suspend but not on hibernate because my hard drive
is encrypted, and this is a single user system, but xss-lock will only
do suspend&hibernate or neither. So I wrapped lid close and i3lock with
a script that locks and then hibernates. And xss-lock has sleep disabled
so it now works.

xss-lock ignores sleep so that hibernate goes unnoticed because pass is
typed at disk unencrypt anyway. i3 needs to lock on suspend