> Removing this is going to break things, you can't just remove a sysctl > because "oh it was a bad idea to add this, sorry."
Yeah, I know... but do you have any other suggestions? Would you take an alternative to make the default wide opened? The current sysctl just doesn't work. It can even print '1 0' meaning everyone has access. Perhaps having it as a non-namespace aware global setting (with a default of on) would be more palatable?
