It can use cap net admin
Did you test this? You're setting capabilities on a python script, that doesn't work and you'd need to set it on the interpreter itself (which is not happening), or at most use a wrapper but this sounds like a security hazard. I don't think the situation changed since bug #388653 *** This bug has been marked as a duplicate of bug 388653 ***