Comment 9 for bug 1347010

> Thinking about what you'll need to implement this, it's probably better for you to query AccountsService's PasswordMode property for the current user

This seems more proper. I was looking at AccountService if it'd have ready method to validate password instead of using PAM directly. It did not, but I didn't happen to think about if it'd have some interface to query the lock status.

But I don't have time to change using AccountService APIs in this timeframe, but surely this is something that should be looked into in future.

> Looking back at the description of this bug... Can a user do anything super awful in Terminal that they can't do using the phone in
> general? Anything that requires sudo will require the user's passcode already.

The same, if more so, applies to FileManager (which is quite restricted in functionality compared to the power of terminal commands).