I know that the net_admin capability is not needed most of the time...

(when it is due to "a bug" in journald) ... however, i cant tell,
and i am rather safe than sorry (safe in the sense that the process can do its job)

i promise, when journald fixes this "bug" i will revisit all these
net_admin calls all over the place