Deny access to lib as there are non-PHP files as well (lib/system/api)