Smart solution!

Very smart solution, would be cool if this would work with NGINX too, these rewrites should work for that:

rewrite ^/safe-entrance.php$ /wp-login.php last;
if ($request_uri ~ ^/wp-login\.php) { return 403; }