What is the correct way to allow binding of port 80 and 443?

Because --impure is a can of worms, which I do not want to open just to be able to fire up a database.

I have choosen flake as my main way to pin inputs rather than niv or anything else, for the fact that the pure evaluation gives some extra benefits. Using --impure then would just be absurd then…