Provide a sandboxed call to /usr/sbin/sysctl