Make it possible to disable the Apache directives for customers and enable it only for resellers or admins. Best choice would be to add a checkbox in client-limits or client-template for enable or disable the Apache directives.
Because if there is a wrong entry e.g. typo mistakes apache could no longer restart. A reload gives an error and apache works. But a restart fails.