I'd like to add an immutable Forbid directive to the core and use it in some places in the default configuration instead of "require all denied".
http://people.apache.org/~covener/forbid.diff This protects from a broad <Location or <If being added that supercedes Directory/Files. I thought someone might object to the duplication w/ AAA or the presence in the core, so opting for RTC.