In kiosk mode, the lock/logout panel allows the unprivilaged user to save the current session which can be a security issue.

Kiosk users should (optionally) not be allowed to save a session when kiosk mode is enabled.  (Maybe a configurable option in kioskrc?)

Not a bug, but please consider: The 'grayout' icons of the restart and shutdown as currently implemented does not provide much contrast to the non-functioning buttons.  Either more contrast, or maybe eliminating non-functioning buttons altogether, would help.

I would also suggest/request a 'save this time only' option for session save when quitting (for non-kiosk users) which would save the current state, but then not automatically save subsequent sessions.  This would allow for easy setup of a default session without the need to uncheck the save box next time around.