<FilesMatch ".(xml)$">
  order allow,deny
  deny from all
</FilesMatch>