.htaccess for internal (non-public) directories