add dotfiles support

#492 with whitelist support
Agreed. Also, back when Apache was the only web server worth using, this would have been an acceptable default. Now, I'd be surprised if it would even be useful for a majority of users.