to check for protection, winfo [from ainfo] now greps .htaccess rather than checking for existence of .htpasswd