On systemd enabled systems, try "loginctl lock-sessions" as udev cmd. It should work on common desktop environments. If you have something custom try xss-lock to react on the lock-sessions signal.