remove trailing ws
Add sysctl hardening