Default to not accepting the creation of `.` prefixed folders?

I think having `nbgitpuller` create folders prefixed with `.` isn't relevant enough to be enabled by default for securiyt reasons. I think its a relatively easy way to create exploits if someone is baited to clicking a malicious nbgitpuller link.

Should we add configuration to make it disabled by default, forcing it to be made opt-in?