These are required on modern distributions (systemd-sysctl)

Move them to the unconfined module instead, leave the FIXME comment because these calls should be removed ASAP