# Nothing in this directory is meant to be fetched over the web.
#
# Belt and braces: the root .htaccess already refuses these paths by rewrite
# rule, but that depends on mod_rewrite being loaded. This does not, and it
# survives the root file being replaced during a deploy.
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
</IfModule>
