disable access to config from lighttpd config
more complete list of dirs to hide from web