lock sysctl cookbook ref
convert template to use kitchen