hide settings.php from users since it contains sensitive data
use the force Luke