Is this secure salt and password above htdocs or www

3

@fiblan that was my original question, I cannot see a way to point the public part of an install to a higher folder, see
Remove cakephp 3.4 from webroot how to for original question. Seems older versions you could.