Any user are able to override the above typing in his .htaccess this:
Options +Includes +ExecCGI
So my question is:
How to (permanently!) disable mod_cgi, mod_includes and others without disallowing user to change "options" directive himself (eg: Options +/-Indexes, Options +/-FollowSymlinks...