SECURITY: Create a .htaccess in /vendor after composer runs