Opening an issue for this since discussing on a PR isn't the best (sorry): #102 (comment)

In that comment, I said:

I just pulled this in via v4.0.0 without noticing that this was changed, and my site lost its .well-known dir, which is used for a lot of different stuff out there (keybase, atproto domain verification, etc).

It seems pretty retrictive to not provide any way to do this other than to manually create tarballs. Can an option be provided to control this? Or at least emit some sort of warning when a file was omitted so people are aware that this happened?

Is there any way we can have a flag to reenable this functionality? Or at least a warning when this happens, or similar?

I think it's too restrictive to ignore hidden files on the whole just because they sometimes contain secrets.