# Block direct browsing of config and library files.
<FilesMatch "^(config|lib)\.php$">
    Require all denied
</FilesMatch>
# Pass the Authorization header through to PHP on CGI/FastCGI hosts.
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
