use system() for stubborn sysctls