`cap_net_admin` not needed

Reading the security audit, it mentions that they found `cap_net_raw` to be enough and `cap_net_admin` unnecessary. Testing it myself, this seems to hold. Is there a specific reason it's still set (in recommendations, post install script etc.) or is it just because of the pcap crate's recommendations?