Truly hide "hidden" modules

[needlestack]

Contentshell should move "hidden" modules outside the document root so that hidden content can't be bookmarked or otherwise explored.

[pg-fred]

A simple, reversible way to do this under linux (which we use for blacklisting inappropriate content) is to chmod 000 the modules directory. Then to reverse it, you would chmod 755. This would assume that you successfully chown -R www-data:www-data all of the installed module directories since it would be www-data doing the chmod. It also assumes you are looking to hide versus delete / archive.