Don't allow files in hidden directories to be served

/cc @geek