sxsetup: support --port; --advanced can now perform fully unprivileged node setup