fix for allow_apache_read_access: change the group ownership only