Yes. One of these should go.
We have this, but it states that this sysctl causes "almost all of the calls into the module" to be disabled.
So the kernel module option seems stronger. And would suggest we delete both sysctls. Perhaps somebody from Red Hat engineering can offer an opinion.