service: remove a misleading comment
The comment makes it sounds as if we could do without CAP_DAC_OVERRIDE if we don't use OpenVSwitch, which is not true. At the very least it's needed by the VPN plugins we spawn to access cert/key material from users' homes.