Restrict WP-CONFIG.php access