I have a few configuration files (xml and xsl format) that my Java code uses. The customer shouldn't be able to tamper with these files. I don't have a problem with the customer being able to read these files, but they shouldn't be able to modify them. 

Notes:

1. These files don't need to be visible to the customers, but it isn't a problem even if they can view them.
2. I should be able to give the customers a new set of configurations (if their requirement changes), so these files should be external to the WAR that I deliver.