If you want to protect a directory from being accessed through the web, create a location and deny access to it:

23