[... sysctl architecture]

All sounds good to me.

I dont want to tell tales, but when adding the bpf buffersize sysctl,
we found out the hard way that the raw sysctl_createv() API is
unecessarily error-prone. :-/.