Restricting automatic kernel-module loading

Actually I was going to do that, but given that all other related sysctl are numbers and the patch introduces lot of changes, I minimized any other new changes and probably you can guess why! the doc tries hard to reflect to their real semantics.