The options for giving a python process CAP_NET_RAW but not root are
horrible (i.e., the python rawsock module^H^H^H^H^H^Hhack).  Of course,
since I'm not POSIXly-correct, I just went ahead and implemented it
before checking if it was reasonably possible.  Well, maybe it will be
useful in the future.