security Apache2 + squirrelmail plug-in

[volesak na aristia.cz]

Dobry den,
prosim o radu. Mam rozbehany qmail s vpopmailem a k tomu SquirrelMail. Rad
bych, aby si uzivatele mohli menit heslo a meli moznost posilat kopie mailu
jinam, popr. odpoved v nepritomnosti. Jako idealni se mi jevi pouziti
plug-inu VPOPMail Account Administration. 
http://www.squirrelmail.org/plugin_view.php?id=103

Jenze me dostalo toto:
    ************* IMPORTANT ************
    For the plugin to work correctly, the Web-Server needs to run as same
user
    as vpopmail does (most common: user vpopmail)
    this is because the plugin needs write-permissions to the users Maildir
to
    - create appropriate .qmail-files
    - create away - messages

Jak zaridit, abych to zprovoznil, ale moc nevybocil ze security? 
Popravde, nevim si s tim rady ani kdybych na bezpecnost nemyslel.
Diky za vsechny rady
Honza Volesak


SUSE 9.0
apache2-2.0.48-9
SquirrelMail verze 1.4.1
vpopmail-5.4.0

Plugins - VPOPMail Account Administration
vpopmail.1.00-1.4.0