Basic auth worked for me. Locked down everything but the home page. Put the credentials on the home page. No more shipping my assets to nowhere hundreds of times a day. Of course, I had _zero_ traffic other than bots...nowadays I have given up putting my crap out there for no one to see.