when I create a file ".user.ini" owned by root inside a /web folder, this file can be read by the browser. Even when this file has 0644...
Separate names with a comma.
