Removed sig from global htaccess, create a new one in the config directory at...

Removed sig from global htaccess, create a new one in the config directory at install time which simply does a DenyFromAll, just like private files