Mod_suexec_helper adds UserId and GroupId directives to Apache, which are passed as arguments to suexec when starting CGI scripts. This allows much finer control of which user and group ID scipts get run as, compared to suexec's normal SuexecUserGroup directive that can only be used once per virtual host definition.
The Open Source toolkit for Secure Sockets Layer and Transport Layer Security