Comment by kro

CAP_NET/SYS_ADMIN is required for this. So this would be "not as bad" as the others.