salsa: require all granted on the document root