Only the `SecServerSignature` directive should be enclosed in `<IfModule security2_module>`
~~~
ServerTokens Full
ServerSignature Off
TraceEnable Off

<IfModule security2_module>
     SecServerSignature " Apache rOCCI-server OCCI/1.1"
</IfModule>
~~~