add docroot_mode parameter to vhost

It can be useful to set the docroot directory to a specific mode, for example to allow write access to a group of users, or block read access from "others".