Block access to yaml config in .htaccess