Letting the user specify the lockfile's path is risky, since we use the lockfile as a sign of clean shutdown. So we need a separate pidfile that we don't use for anything.