add a new sysctl.conf to handle SYSCTL_ON=n