secmem: Clean up ERRNO handling.
* src/secmem.c (lock_pool_pages): Use ERR only for the return value from mlock.