--- a/man/fort.8
+++ b/man/fort.8
@@ -351,6 +351,9 @@ alias are commonly located at \fI/etc/se
 .P
 The default port (323) is privileged. To improve security, either change or
 jail it.
+The default \fIfort-validator.service\fR configuration sets the
+\fICAP_NET_BIND_SERVICE\fR capability to allow the unprivileged daemon
+to bind port 323 anyway.
 .RE
 .P
 
