# Verification documents are served only through /admin/document.php,
# which checks the session and writes an audit row. Nothing here is
# reachable directly, even with the exact filename.
Require all denied
