Exactly. There is nothing that should be available through DNP. The only thing you need to watch out for is that you don't use .htaccess as the file extension if you also have IISPassword installed. That one uses .htaccess also. In my experience it is best to leave the default iispasswrd extensions and give ISAPI_Rewrite it's own, for example: .urlrewrite as extension.
Users can manage their own rewriterules just by editing this file in the root of the website.
Frans