prevent hidden files from being served