Match the platform Vault on UI, mlock and the TLS flag

The UI stays reachable on the private addresses only. Integrated raft storage runs with mlock disabled, as on the platform Vault and as Vault recommends for raft.

infra/prod/vault/config/vault-3.hcl

@@ -1,7 +1,7 @@
 # SXCHNGE production Vault, node 3. Only api_addr, cluster_addr and node_id
 # differ between the three node files.
-ui            = false
-disable_mlock = false
+ui            = true
+disable_mlock = true
 api_addr      = "http://192.168.10.98:8200"
 cluster_addr  = "https://192.168.10.98:8201"
 
@@ -10,7 +10,7 @@ listener "tcp" {
   cluster_address = "0.0.0.0:8201"
   # Plain HTTP on the private network; raft and request forwarding on the
   # cluster port are encrypted by Vault itself.
-  tls_disable = true
+  tls_disable     = 1
 }
 
 storage "raft" {