you know there are some special URLs starting with ~ (tilde).
some of them are per-folder (~files.lst) and some are only in the root (~folder.tar)
when the root is protected, it is not obvious what should be accessible and what not.
let's say, the root is password protected. should /~progress be accessible?
as far as i remember, the current beta acts this way:
~imgs are accessible
others are not
any of you interested in the topic may discuss the thing here.
it's better if you actually test if the behaviour is the one like before discussing.