This directory is protected by htaccess. Files must have read access rights for Others though. .htcom is protected for Others since it contains the command to create the password.