add sysctl manifest