In TOML, all keys after a [section] header belong to that table.
The examples had api-bind-to after [secrets], causing it to be
parsed as secrets.api-bind-to and triggering "incorrect secret
format" errors.

Fixes #6

It seems that default DynamicUser limits are very low. We have to
increase them anyway.

added the missing slash mentioned in issue #287

AmbientCapabilities=CAP_NET_BIND_SERVICE

replace : with /

- remove MTG_STATSD_PORT, because it is not used in the code
- update MTG_STATSD_ADDR description to reflect all possible use cases

- little typo in docker command line 
- added more preferred 'secure only' example