tor --verify-config should not bind to ports
https://lists.torproject.org/pipermail/tor-talk/2015-February/036973.html
maybe we can also get rid of the 'requires root privileges' - thing? https://lists.torproject.org/pipermail/tor-talk/2015-February/036970.html