Seems the applications can call mlockall() to do this