added memlock and lowered nofiles