# Nothing under storage/ may be fetched directly: KYC documents and the mail log
# are handed out by the API only (see backend/kyc.php).
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>