What the shipped .htaccess protects Since 1.11.0 WBAMS ships protective rules in the root .htaccess, outside the managed-rules markers so they survive when WBAMS rewrites its own rules.