Comment by man8alexd

In simple cases, instead of using `mlock` just set cgroup memory.min