safer fastcgi config