# Deny direct web access to archived cancellation notices.
# View them via cancellation-notice-view.php which checks auth.
Order Deny,Allow
Deny from all
Require all denied

# Also disable directory listing as belt-and-braces
Options -Indexes
