fix security bug in PHP FPM role