fix per Daira's suggestions

contrib/DEBIAN/examples/zcash.conf

@@ -1,7 +1,7 @@
 ##
 ## zcash.conf configuration file. Lines beginning with # are comments.
 ##
- 
+
 # Network-related settings:
 
 # Run on the test network instead of the real zcash network.
@@ -68,7 +68,7 @@
 #rpcbind=<addr>
 
 # You must set rpcuser and rpcpassword to secure the JSON-RPC api
-#rpcuser=Ulysseys
+#rpcuser=Ulysses
 #rpcpassword=YourSuperGreatPasswordNumber_DO_NOT_USE_THIS_OR_YOU_WILL_GET_ROBBED_385593
 
 # How many seconds zcash will wait for a complete RPC HTTP request.
@@ -80,7 +80,9 @@
 # either as a single IPv4/IPv6 or with a subnet specification.
 
 # NOTE: opening up the RPC port to hosts outside your local trusted network is NOT RECOMMENDED,
-# because the rpcpassword is transmitted over the network unencrypted.
+# because the rpcpassword is transmitted over the network unencrypted and also because anyone 
+# that can authenticate on the RPC port can steal your keys + take over the account running zcashd
+# For more information see https://github.com/zcash/zcash/issues/1497
 
 #rpcallowip=10.1.1.34/255.255.255.0
 #rpcallowip=1.2.3.4/24
@@ -107,8 +109,8 @@
 # Send transactions as zero-fee transactions if possible (default: 0)
 #sendfreetransactions=0
 
-# Create transactions that have enough fees (or priority) so they are likely to begin confirmation within n blocks (default: 1).
-# This setting is over-ridden by the -paytxfee option.
+# Create transactions that have enough fees (or priority) so they are likely to # begin confirmation within n blocks (default: 1).
+# This setting is overridden by the -paytxfee option.
 #txconfirmtarget=n
 
 # Miscellaneous options
@@ -125,7 +127,8 @@
 
 # Pay an optional transaction fee every time you send zcash.  Transactions with fees
 # are more likely than free transactions to be included in generated blocks, so may
-# be validated sooner.
+# be validated sooner. This setting does not affect private transactions created with 
+# 'z_sendmany'.
 #paytxfee=0.00