Use file capabilities to run as a limited user.

Instead of binding to a higher port, grant the apache2
CAP_NET_BIND_SERVICE to bind to port 80.