There are actually two different cases when mlock(2) returns
ENOMEM. Clarify this, taking text from SUS.

Reviewed by:	kib
Fix style and comments.
Separate the locking macros that are used in the packet flow path
from others. This helps easy switch to use pfil(4) lock.