# Deny all access — code is loaded via bootstrap, never directly
Require all denied
