Read the
CGI wrapper HOWTO to chroot CGI's and to run them with the user id of a specific user.
Reverse proxying all files except .pl is not possible, yet. In 9.6, it will be possible by using "ReverseProxy !\.pl$ <target>". So, the ! is new for ReverseProxy.