.htaccess -  prevent some more file(-types) from direct access