Ports are more secure. Updated readme. Runs unprivilged by default.