Using sysctl without priveledged mode

I need to set some params in runtime with sysctl but i don’t want to use priveledged for security reasons. I’ve tried to set kernel capabilities (all of them) but it’s not helping. Is there a way to do it?