verify: block public access to the htaccess-custom file.