Disable /status.html and /status by default

The PHP fpm status was open to the world by default. Suggest we change this default.