@koehntopp Can't you do it via browser by logging into your iCloud account?
1. select "Find My" > "Items."
2. select the AirTags and click "Remove Item."

Has worked for company owned items for me before.

@leune Shoot, ok looks like we might need to do the following:

1. ensure that the script has the right caps:

sudo setcap cap_net_admin,cap_net_raw=eip /usr/local/bin/tcpdump

2. (I think this already is in place, but just to make sure) Restrict direct access to /usr/sbin/tcpdump.orig.

sudo chmod 750 /usr/sbin/tcpdump.orig
sudo chown root:tcpdump-users /usr/sbin/tcpdump.orig

I can't test it at the moment, but in my head this should work.