move that into debian.org module, like the other sysctl stuff. puppet does not like...