# Defence in depth: these are PHP-only files, but block them anyway.
<FilesMatch "^(config\.php|_boot\.php)$">
  Require all denied
</FilesMatch>
Options -Indexes
