tighten up security of FPM and Nginx status pages