# Note: All path components must have search permission for Apache user,
  #       even when suexec is in use
  # Note: Directory and programs must have user/group ownership matching those
  #       in SuexecUserGroup directive
  # Note: Directory must not have group or other write permission
  # Note: 'cgi' module must be enabled
  ScriptAlias /api /srv/web/xyz/current/api-docroot
  <Directory /srv/web/xyz/current/api-docroot>
    # Turn off fcgid handling
    RemoveHandler .php
  </Directory>