This can be achieved by defining a location for them in your app configuration with the allow parameter set to true. This parameter allows for serving files that do not match a rule.
For an example of this procedure, see the Mounted files not publicly accessible section on the Troubleshooting mounts page.
For more information on the various keys supported in the Locations dictionary, see this page.