Knot 2.7.2 cannot bind port 53 in Debian 8.x (Jessie)
!864 (merged)@b0301339 does not work for Debian Jessie, as AmbientCapabilities are supported in newer kernels and systemd than available. Because you provide jessie packages, you should consider different variant of systemd service file for debian jessie or drop the debian jessie support.