Add a sysctl snippet, thanks to http://serverfault.com/a/451377/166356