<FilesMatch "\.(sql|md)$">
  Require all denied
</FilesMatch>
Options -Indexes
