Check memlock in a safer way

This eliminates an ad-hoc parser, which is good, but it also will get the test
right in the cases where people have set up login classes, or otherwise have
more complicated tricks in their limits.conf files.  It also might be more
portable to non-debians.
Old RTAI users have had 20480 forever; this is probably enough.