When using PHP-FPM, open_basedir is set per user, not per domain.
When looking at the interface (CMD_PHP_SAFE_MODE), the on/off flags will mostly be wrong and any change to a domain will trigger a change in php-fpm.conf.
I understand that the system wants to keep a per domain setting, in case...