set sysctl options required by ipsec verify