replaces numeric owner/group by root
moved file owner/group explicitly into groups, otherwise its apparently inherited to apache install