openvpn: Define service capabilities explicitly.

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>

openvpn/openvpn@.service

@@ -3,6 +3,7 @@ Description=OpenVPN connection to %i
 PartOf=openvpn.service
 ReloadPropagatedFrom=openvpn.service
 After=network.target
+CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
 
 [Service]
 Type=forking