sysctl variables should be in code block