Capabilities

[vorner]

The daemon can drop root privileges on startup. But it makes sense to keep some capabilities (configured by the caller, probably not the administrator) across this privilege drop ‒ like CAP_NET.