[CentOS] Best way to secure apache web root