CRM-14092: Additional protection against directory browsing

When .htaccess isn't enough, try spraying blank index.html in all the places and see.