Your Thunderbolt port can be used to steal data from a locked PC — here's the setting that stops it