kernel: sysctl settings

As recommended by: 
* https://developers.google.com/compute/docs/images#kernelsecuritystronglyrecommended
* https://developers.google.com/compute/docs/images#kernelsecurityrecommended