hs: Mention in the manpage that Sandbox and adding a service with the control port fails

From legacy/trac#16106 (moved).

We can't tell the sandbox about a new HiddenServiceDir at runtime so this will always fail until we get a better sandbox system.

For now, we should at least document it in the manpage.