podman: container cannot bind to priviliged port 631 (cups)

On the host, you can make 631 to be unproviliged
sudo sysctl -w net.ipv4.ip_unprivileged_port_start=631
https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux/51439516#51439516