For all that know their stuff around Linux and manually control PHP, you can create separated PHP-FPM services and assign them one per client.
Each client having it's own PHP-FPM service, will provide isolation > security, stability (if a client has a script that stalls the PHP-FPM service, the...