allow vendor_per_mgr self:capability net_raw;