Actually, I think we should probably move most of those lines up here so they don't have apache permissions. It's poor security practice for apache to be able to write to its own config files or any directory containing executable code.