Then build your CGIs restricted. Restricting the runtime by default, *especially* when setting runtime options at compile time is so much of a pain, is just going to cause problems. I'm already thinking that I may have to skip ghc7.
-with-rtsopts="-H128m -K1m"
while compiling
your program, and now that will forever be the default RTS settings
for your program.