This is slightly more verbose and inconvenient, but it forces you to think about what the wrapper ownership and permissions will be.
NoiseTorch needs setcap set to 'cap_sys_resource=+ep' to work correctly accordingly to the README.md: https://github.com/lawl/NoiseTorch#download--install So this PR adds it.