Same issue of avoiding publishing private code, this time with nothing published by default.
Ivan, can you quickly try this apache config and give your opinion if it acceptable that you add .htaccess in the code to be tested ?
/cc @jm @Tyagov @rafael