This function detects whether a domain needs RLIMIT_MEMLOCK
to be set, and if so, uses an appropriate value.