Makes sense. But I still would never advocate a .htpasswd file. There's nothing in there that can't be configured in a the main Apache configs, and enabling them opens up potential security holes to anyone with access to any Apache htdocs,  and degrades Apache performance.