Block access to sensitive WordPress files