non-root Kea processes
Please consider using POSIX capabilities for improve security and make Kea servers not to run with root privileges. I think CAP_NET_RAW capability should be enough to run all functionality of Kea. Daemons should start with root privileges, then should set only required capabilities (CAP_NET_RAW or, if need be, other) and switch privileges to other non-root user.