@feld @cult Bind to ports below 1024 and then drop privileges. Unix/Linux daemons have been doing this for decades. See BIND for example.