That will protect it from the folks hitting it via a browser but you may want to check permission on the directory itself to insure an insider can't mess with it (excluding your system admin, of course!)