The macvlan is initially created in a separate network namespace and the sysctl must be set in that namespace too. Fixes #208.