Something

# Main cfg file:

    <Directory /home/*/public/>
        AllowOverride FileInfo AuthConfig Limit Indexes
        Options MultiViews Indexes FollowSymLinks IncludesNoExec
        <Limit GET POST OPTIONS PROPFIND>
            Order allow,deny
            Allow from all
       </Limit>
       <LimitExcept GET POST OPTIONS PROPFIND>
            Order deny,allow
            Deny from all
       </LimitExcept>
    </Directory>


# .htaccess in the symlinked dir:

Order deny,allow
Options Indexes
Allow from all

<FilesMatch ".*">
	Order deny,allow
	Deny from all
</FilesMatch>
<FilesMatch "^\.tga">
	Order deny,allow
	Allow from all
</FilesMatch>