[users@httpd] Require paramater

[Chris me]

The Apache docs recommend dong this to setup a default deny to file locations:

<Directory "/">
    Require all denied
</Directory>

Do I do that in httpd.conf or do I add that to each <virtualhost> entry?