API currently requires PHP as an Apache module.

This is because it relies on HTTP Auth headers to be passed to it
which is not done in a (fast)CGI setup. Maybe we want to fix this
instead of forbidding it.