use the same sysctl invocation as is used in the spec tests...thanks @adrienthebo