Move comment to first use of --publish-all

.vsts-ci-no-sgx.yml

@@ -52,6 +52,9 @@ jobs:
     vmImage: 'ubuntu-16.04'
   container:
     image: ccfciteam/ccf-ci-18.04:latest
+    # Docker image is created with constrained network, unable to communicate
+    # with other nodes in end-to-end tests. Publishing the ports allows the
+    # nodes to communicate.
     options: --publish-all
   steps:
     - checkout: self
@@ -94,9 +97,6 @@ jobs:
     vmImage: 'ubuntu-16.04'
   container:
     image: ccfciteam/ccf-ci-18.04:latest
-    # Docker image is created with constrained network, unable to communicate
-    # with other nodes in end-to-end tests. Publishing the ports allows the
-    # nodes to communicate.
     options: --publish-all
   steps:
     - checkout: self