sysctl: add validations and descriptions