Disable AmbientCapabilities=CAP_NET_BIND_SERVICE
Disable AmbientCapabilities=CAP_NET_BIND_SERVICE

We are going to run Hoff behind a reverse proxy, so this is not needed,
and we should respect the principle of least privilege.

ruuda/hoff,ruuda/hoff