htpasswd visible at stats directory

Hi,

I have just installed Virtualmin Pro.

Noticed that the htpasswd file is visible in the stats directory. Clicking on it via browser reveals the usernames and encrypted passwords.

Should the password file be named by default to .htpasswd instead of htpasswd?

Status: 
Closed (fixed)