<FilesMatch "^(config|db)\.php$">
    Require all denied
</FilesMatch>
