PR_ALLOW_MLOCK
{"allow.mlock", "allow.nomlock", PR_ALLOW_MLOCK},
if (cred->cr_prison->pr_allow & PR_ALLOW_MLOCK)
NULL, PR_ALLOW_MLOCK, sysctl_jail_default_allow, "I",