# Keep private runtime files out of direct web access.
<FilesMatch "^(firebase-service-account|fcm_tokens)\.json$">
    Require all denied
</FilesMatch>

<FilesMatch "^firebase-service-account\.json\.json$">
    Require all denied
</FilesMatch>
