Options -Indexes Header always set X-Frame-Options "SAMEORIGIN" Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "strict-origin-when-cross-origin" Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()" Require all denied RedirectMatch 404 ^/01/(tests|docs)(/|$) RedirectMatch 404 ^/01/\.