sudo capsh --caps='cap_net_bind_service+eip cap_setpcap,cap_setuid,cap_setgid+ep' \
--keep=1 --user=non-root-user --addamb=cap_net_bind_service -- \
-c '/path/to/your/command'