serve hidden directories when explicitly requested

This PR closes #5157.