rediff fpm patches; appli config split first
set fpm socket rw accessible by http group by default (instead of root:root)