use separate sysctl file