https://samhobbs.co.uk/2015/09/example-whitelisting-rules-apache-modsecurity-and-owasp-core-rule-set
https://ownyourbits.com/2017/03/23/modsecurity-web-application-firewall-for-nextcloud/
https://stackoverflow.com/a/48810585/738852