<FilesMatch "^(config|db_credentials)\.php$">
    Require all denied
</FilesMatch>
