This is needed because you need to be root in order to create a tun interface on macOS, and you need CAP_NET_ADMIN on Linux.