To add, I tried with a file called ".test.ini" and the following rule:
RewriteRule ^/\.test\.ini$ - [F,L,NC]
And this worked. Use equivalent rule for a file called ".user.ini" and it doesn't. Maybe something significant about the ".user.ini" filename in the code?