<FilesMatch "^passwd$">
    Deny from all
</FilesMatch>