make man work; also formatting
modified service files and scripts to allow sandboxing of incoming cpu connections on 9front