Keep /var/www/html/ and identities owned by root, so nobody else can write
2 files changed