.pem file won't be leaked in this ("i?php") manner. Only file's location would be revealed. Of course, you are completely right, it should still be inaccessibl

.pem file won't be leaked in this ("i?php") manner. Only file's location would be revealed. Of course, you are completely right, it should still be inaccessible from the web.