Ownership and permissions on *.php files

[lazyleopard]

Have I done something wrong during install, or are the *.php files meant to be owned and writable by the ID and group supplied to configure in --with-webuser and --with-webgroup? Seems to me it'd be better if they weren't writable by that particular user, and zm seems to work just fine after I've done "chown root.root *.php"...