[CAP_NET_ADMIN]

So.. like any other Graphics/Compute API when it was actively developed.