If it were me I'd make it easy on myself and just use the password protect option from cPanel which will guarantee no one can get into the directory without a user/pass