This is kind of misleading.  We may want to change the line above to:

`sudo docker -d -sslkey=privkey.pem -sslcert=cacert.pem -H=tcp://0.0.0.0 -H unix:///var/run/docker.sock`

So that the client still works while the API is being served of https at the same time.