location ~* \.keys$ {
    deny all;
}