optimize sysctl for 389