How to use use ipset_file without running adguard as root?

[user9931]

How to use use ipset_file without running adguard as root? using (as many, i suppose) under limited user account, and adguardhome shows

ipset: warning: cannot initialize: ipset: getting ipsets from config line at idx 0: querying ipset "myipset": netfilter query: netlink receive: operation

seems like AmbientCapabilities=CAP_NET_ADMIN in adguardhome.service works but its also seems very powerful. any other options?