enc_bcrypt is no longer extra because it doesn't depend on external dependencies anymore
Move chan register event prior to applying final mode changes, so cs_mode can set mlock on register. #1620
Allow mlock to be enforced when unsetting defcon modes