Deny Access to Hidden Files and Directories should handle .well-known

[sdavids]

https://github.com/phanan/htaccess#deny-access-to-hidden-files-and-directories

Instead of:

RedirectMatch 404 /\..*$

your example could be:

RedirectMatch 404 /\.(?!well-known\/)

Useful for:

A proposed standard which allows websites to define security policies.
https://securitytxt.org/

Private prefetch proxy in Chrome
https://developer.chrome.com/blog/private-prefetch-proxy/#traffic

Other uses:
https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml