sysctl: fix false positives when PROC_SYSCTL=n