This won't work and I don't know why... I've gotten it work to before:
Code:
<Directory "/foo/private">
    Options FollowSymLinks
    AuthType Basic
    AuthName "My files- if you're not me, get out"
    AuthUserFile "/foo/private/.pass"
    Require valid-user
</Directory>
.pass is on mode 0600 and owned by the apache user