rediff fpm patches; apply config split first
set fpm socket rw accessible by http group by default (instead of root:root)