Request to support running with just CAP_BPF instead of CAP_SYS_ADMIN

[chrisirhc]

Article reference: https://mdaverde.com/posts/cap-bpf/

CAP_SYS_ADMIN is highly permissive. There's a newer CAP_BPF capability on newer kernels.
I'm opening this issue to see if there's interest in supporting usage via CAP_BPF.