disable access on pem files (private keys)

e.g. in core/tcpdf/ there is a tcpdf.pem which should not be downloadable
Merge pull request #28 from mroswald/patch-2

disable access on pem files (private keys)