OpenVPN needs these rights in order to properly access /dev/tun without su