added hardened sysctl.conf configuration