Run Wireshark without setuid OR capabilities

I want to run Wireshark so that I will have to type in my sudo password to run it, but I don't want to give the dumpcap binary special privileges (set-uid, capabilities, etc.). How can I do that without ruing Wireshark itself as root?