Allows a process to use raw networking:
  - RAW sockets
  - PACKET sockets
  - binding to any address for transparent proxying
    (also permitted via CAP_NET_ADMIN)