added some sane sysctl defaults