# Block direct web access to private credential files.
# Uses mod_rewrite (widely allowed on shared hosting) and is
# wrapped in IfModule so it never causes a 500 error if unsupported.
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRul