Allows a process to use raw networking:
- RAW sockets
- PACKET sockets
- binding to any address for transparent proxying
(also permitted via CAP_NET_ADMIN)