sysctl, various ERANGE checking as you can get overflow with numeric values (for example ker.maxfiles > INT_MAX leads to -1...)