FYI -- I discovered today that in order to protect directories (e.g. wp-admin) I had to add a wildcard after the directory name. Previously, all I needed was the forward slash.
I used to use: wp-admin/
Now I use: wp-admin/*
However, the example text included in 1.4.1 is "wp-admin/"; I suggest changing this to include the wildcarding.