# Recordings are private. Never serve them directly — only through crm/recording.php (auth).
Require all denied
