Denied access to module hook files

As proposed by @[5050] in #39 this now sits in the vhost file and block access to files in the hooks folder which shouldn't be executable from the web.