hardening: sysctl hosts / routers: better quoting