Tidy up and add /etc/sysctl.conf hardening