Forbid access to `.conf` files

Add `.conf` files to the list of files that Apache forbids access to
because of the sensitive nature of their content. Additionally, remove
`.config` files from the list as they are not commonly used (especially
with Apache servers).