allow vendor_per_mgr self:capability { net_raw };