the systemd bypass advice applies only if setcap

"In its current location, the paragraph implies that you need to turn off NoNewPrivileges in order to run obfsproxy on any port, and I think you only need to run it if you're using a low port."

I cc @phw so he can verify if this statement is correct.

Also, somebody who knows lektor should make sure I didn't screw up the formatting. (I tried building the website locally to see, and it gave me a pile of python tracebacks, so that is a task for another day.)