Avoid shelling out to sysctl when we can read /proc/sys