Fixes for VAT findings

Since the final container is based on a new image, the ownership of /usr/local/apache2 is left dangling with no true ownership. The php base image user:group is not carried over. "Some docs are being flagged for encryption keys, but they are examples and unuseful keys, let's just remove them.

changed title from Fixes to for VAT findings to Fixes for VAT findings

approved this merge request

mentioned in commit ed929f9c

merged