Actually, maybe this is fine this.  It will only add lines if there is a failure, so this shouldn't be cluttering up sysctl.conf needlessly.  My only concern is that if the default is fine, and was unchanged, let's not add anything to sysctl.conf.