Keep all security rules in one place, support Apache 2.4 syntax