Move sysctl to its own cookbook