mpm-itk allows you to run each of your vhost under a separate UID and GID WWW: http://home.samfundet.no/~sesse/mpm-itk/ - use LD_CONFIG