Add min_filelist_kbytes sysctl for protecting the working set