Some history:

I tried to use freeradius as dhcp server, but I have problems with ARP table upgrade.

Problem is, that if we set radius binary with capabilities, and then start it as root and then drop root privilleges and run as "freerad" user [1], it drop also its capabilities ...[2]

Resolution is at: https://wiki.debian.org/Hardening/Daemons