You don't need openbase_dir or suhosin since it is controlled by zadmin account and is only a redirect to the webmail folder.
Has been used over 5 years now without exploit.
It would be better to have it just in case though!
Has been used over 5 years now without exploit.
It would be better to have it just in case though!