make cryptomultifilesystem the default backend
disallow core dumps
more zeroing
add mlockall call