seems to be start-able as a service.

net-nds/kanidmd/files/kanidm.initd

@@ -11,7 +11,7 @@ description="Kanidm: simple, secure, and fast identity management platform"
 : ${KANIDM_CUSTOM:=${KANIDM_WORK_DIR}/custom}
 
 command="/usr/sbin/kanidmd"
-command_args="server --config ${KANIDM_CONF}"
+command_args="--config-path ${KANIDM_CONF} server"
 command_background="true"
 command_user="${KANIDM_USER}:${KANIDM_GROUP}"
 error_log="/var/log/${RC_SVCNAME}/${RC_SVCNAME}.err"

net-nds/kanidmd/kanidmd-1.8.5-r1.ebuild

@@ -799,6 +799,11 @@ BDEPEND="
 
 S="${WORKDIR}/kanidm-${PV}"
 
+pkg_setup() {
+	export KANIDM_BUILD_PROFILE=release_linux
+	rust_pkg_setup
+}
+
 src_prepare() {
 	eapply_user
 	echo "ECARGO_ARGS: ${ECARGO_ARGS}"
@@ -847,6 +852,10 @@ src_install() {
 		systemd_dounit platform/opensuse/kanidmd.service
 
 		newinitd "${FILESDIR}/kanidm.initd" kanidmd
+
+		setcap 'CAP_NET_BIND_SERVICE+ep' /usr/sbin/kanidmd
+		dodir /run/kanidmd
+		chown kanidm /var/run/kanidmd
 	fi
 
 	if use acct; then