<FilesMatch "\.pem$">
deny from all
</FilesMatch>
