Add EnableSendfile on. Prevent web clients from accessing htaccess files and backup files (~ so far).