Support separate sysctl checking (without kconfig)