# Not a web-accessible folder. (Defence in depth: the web root should be webroot/ - see DEPLOY.txt)
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
</IfModule>
