Right, i've removed this from the template. I'm setting up my www pool like this when using the cookbook:

php_fpm_pool "www" do
	security_limit_extensions ".php .html .htm"
	listen_owner "www-data"
	listen_group "www-data"
	listen_mode "0744"
end

Possible to use node values here of course, but not part of the php-fpm cookbook.