Update openshift-pep-015-git.md

review comments + questions
Yes. I've asked @rhatdan if there's any way for Apache (or another web server) to change the execution context based on the user who authenticates.

Alternatively, we could have a single user (e.g. apache or git) own all the repositories and not use unique MCS labels. Then we definitely couldn't allow custom code in hooks. But that would allow the web server to drop privileges to serve requests.