added initial support for running on privileged ports

[without being root!]