Yeah!!! Good thought. But I think that pete’s security configuration is before proxy pass happens, and that would happen in your global httpd.conf before and not in .htaccess. Of course you can do that things as you do in ACF, because it’s Apache related, not cfengine related. You just need to set it up in the correct logic.