Locked the Passenger (nginx) version down via config.
There's no need to make this configurable since it's hard-coded in the Passenger installation packages.
Use the newer Passenger 4 configuration name.
Set the Passenger (nginx) group just like we do for Apache.