3 ms·

For systemd version >= 229, this does the same: [Service] AmbientCapabilities=CAP_NET_BIND_SERVICE