Problem with Authentication Service?

[Pontus Amberg]

I just noticed that URL space subtrees that I specified in the 
Authentication Service config
to require authentication (for example "+/apps") is accessible even if 
the user hasn't
logged in. I'm testing this using the current trunk.

Is this a local problem with my config or is it a bug in the current trunk?
/Pontus