This should be fine with systemd, the RPM has done this for years.
What you want to avoid is the systemd unit file parameters that start the service as non-root, then systemd starts it as non-root and Suricata can’t do the setup it needs before dropping privileges.