make running without CAP_SYS_ADMIN possible
chmod socket 777 (user is warned in README)