Create 'secret.php'. No templating.
Add 'server_aliases' attribute; default to FQDN.
The install_dir needs to exist before unpacking
Make the install_dir recursivly owned by apache.
Only extract the tarball if the version changes