ansible-inventories/arocom#2859 proposal to generally prevent access to some Drupal text files

As requested in ansible-inventories/arocom#2859 we would like to be able to centrally disable access to files like CHANGELOG.txt.

Since this should not only work for D8 but also D7 we would like to work this into one central solution.