web server should own the files directory for all sites it produces