Security: Deny access to .hg/* via mod_rewrite

My website is a mercurial repository with multiple subrepositories. I need to make sure I'm denying access to all files in every .hg directory on the server.

Mercurial push, abort: authorization failed

I'm having problems with pushing to mercurial repository:

$ hg push

pushing to https://user:***@hg.domain.com/X_repo

searching for changes

abort: authorization failed