Protect wp-config.php

Other relevant snippets: