Disable file resource in debug_rsync and enable indexes on vhost
Set an exec environment path for htpasswd generation
Use BasicAuth since the htpasswd resource can't supply a realm

Digest isn't more secure than Basic anyway see:
 https://httpd.apache.org/docs/2.4/mod/mod_auth_digest.html#using