Apparmor profile for DNSCrypt

On systems that support apparmor this file can be dropped into /etc/apparmor.d/apparmor.profile.dnscrypt-proxy

On reboot it should be active. aa-status to confirm, 
aa-enforce /etc/apparmor.d/apparmor.profile.dnscrypt-proxy 
if it doesn't enforce after reboot.