Mark,
I am by no means a mod_perl guru... and this may not solve your full
problem... but, you could put something httpd.conf that says something like:
if ($paid) then allow .htaccess files; else don't. In other words,
AllowOverride AuthConfig if paid; else AllowOverride None.
Something along those lines would solve for part of your problem atleast.
Then it would just be up to the users to invoke the authentication.
I hope this could help you some.
Later.
Carey Burgess
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com