Update behavior of allow_php

The old allow_php TRUE option has been removed. It always had warnings
but even so it doesn't really have a point.

The old allow_php 'auto' behavior is what now happens when allow_php
is set to TRUE, except updated to work with the user system. Basically,
users with access to / are considered trusted to have control over the
entire server; other users aren't trusted.