nixos/nat: Fix override so that sysctls are properly preserved