Not root: proving an XDP agent needs exactly three capabilities

Building AgentXDP, part 3. Part 2 parsed RoCE v2 inside an XDP program. This part is about the permission to load it: how much power the agent really needs, and how the tests prove it, on my VM and in