How to restrict access between folders on the same virtual host
Solution 1:
You can set up multiple PHP-FPM process pools in different chroot environments.
Then, all requests except example.com/blog/
would be redirected to the PHP-FPM store pool and /blog/
requests would be passed to blog pool.
Running the pools in different chroot environments ensures that one pool cannot access files for another environment.