A few more configurable parameters. boot.mlockall does not work yet on CFv2