remove incompatible options in systcl with lxc-secure containers