Options -Indexes

# Public Candidate Task endpoints. Sensitive bridge endpoints enforce their own
# HMAC authentication in PHP before performing any protected action.
<FilesMatch "^(?:index|sync|asset|status|recover-submission|certify-submission)\.php$">
  Require all granted
</FilesMatch>
<FilesMatch "^(?!(?:index|sync|asset|status|recover-submission|certify-submission)\.php$).+\.php$">
  Require all denied
</FilesMatch>
