Just tested on fresh 2.9.1. WP install. The security features do seem to work but the 'Private Only Custom Login Settings' are not working. Seeing a regular login screen with WP logo. I tried just disabling WP logo and even that is not working.
I'm using Thematic theme and permalinks (not sure if that makes any difference).