Thanks this was helpful. Only change I had to make was for this section:
<denyUrlSequences>
<add sequence="inc" />
<add sequence="info" />
<add sequence="module" />
<add sequence="sh" />
<add sequence="sql" />
<add sequence="\..*" />
</denyUrlSequences>
I had to remove the <add sequence="module" /> line. It gave me a 404 for the module section in the admin until I removed that.