lws-attack-secret: this file is one level above the docroot, if a client
ever receives it the server let a request out of its mount.
