- don't require mod_access_compat, it's better to break existing configs
  than to hide access errors as mod_access_compat is completely
  independent of mod_authz_host and may open up entire site
- rel 3