RewriteEngine On
RewriteRule ^/api/ index.php
RedirectMatch 403 ^/private/.*$