added a caution about how to configure security for php-cgi/Apache