<Files *.pem>
require all denied
</Files> 

