How do I block a subdirectory from WordPress theming?

Turns out my trouble was caused by a stray server-side include that was returning a 404, which WordPress tried to intercept.

This is not the WordPress problem you are looking for.