Would this leave the standard “example.com/login” and “example.com/wp-admin” active? Is there a way to disable those (for more security)?