sort sysctls, change fs.suid_dumpable to 0