You cannot hide HTML, plain and simple. You can hide server-side scripts and such, but that is by default as only the results of the scripts will display. Otherwise, html, css, js, txt, and a whole host of others cannot be hidden. You can, however, control access using passwords, but even then, it is problematical. The results of any parse will always be viewable.