In example unit file, run the scheduler as kube, not root

Only the kubelet and proxy do things which need root privs