minor updates to httpd.conf drop old patches
- only enable suexec when appropriate (Jim Radford, #453697)