I am re-thinking our server's permission and group strategy. So I was trying to check what permissions was needed with the current setup for Apache to access the files.
I changed the permissions of index.php to 200 (only write for user). But Apache still could read this file! I then restarted Apache, which fixed this problem. Was Apache running as root, or was it necessary to reboot it for the permissions to take effect?