This is basically a stupid workaround. :)

I'll look into disabling the specific sysctl (I don't know how off hand, I'll find an example) and check out the grsec patches to see what changes in the interface.