apache module should not mess docroot permissions