# Secrets folder: never served over HTTP.
Require all denied