# Only allow access via CLI or with valid token
# The PHP scripts themselves check the token
# But block direct browsing
Options -Indexes
