[_moo]

Thanks for that.
Would be interesting to know why you are not set up to have the web server process as 'group', but maybe you can't say for security reasons