systemd: enable manual activation of kresd.service as non-root user

To be able to bind to a well known port as a non-root user, the CAP_NET_BIND_SERVICE
capability is required.
11 jobs for systemd-enable-manual-activation
in 6 minutes and 48 seconds and was queued for 6 seconds