Congrats on getting to a situation that works for you, but I would gently suggest that having to custom-patch suexec of all things might not be the best way to approach a long-term solution. I don't know how that aspect of the solution reflects on systemd though.