Fix: Database file is publicly accessible

If not with this htaccess rule, there should be at least a note in the
installation instructions to set permissions to 640 for data.db.