Custom directory index with basic auth protection, but allows direct file access