Figured out the mlockall problem: run as root.