Where should I safely store non-served private files (invoices, sqlite db file etc.)? I dont want to serve that files. These are not static files(not img js)