Commented out SuexecUserGroup
dns template for child name servers
template with openbasedir restriction