Mod_security disable per site

Trying to disable mod_security for single website via .htaccess. Getting error:

.htaccess: SecRuleEngine not allowed here

Even single rule exclusion does not work:

.htaccess: SecRuleRemoveById not allowed here

vhost conf has “AllowOverride All”.

As far as know HestiaCP doesn’t install or manage mod_security. Having said that, i’ll be happy if they did for a better security.

Of course they do not install it. I installed it. But why it does not allow to turn off per website… Maybe someone already faced this problem.