I've set expose_php to "off" in PHP Configuration Editor, restarted apache, and I still see x-powered-by in page headers. Is there anything else I can do?