<Files *.pem>
order deny,allow
deny from all
</Files> 

