protection of /stats/

[tensor]

Currently 3.0.1.3 there is a .htaccess file in /stats/ of every web site.

Here is the contents:

AuthType Basic
AuthName "Members Only"
AuthUserFile /var/www/clients/clientX/webYY/.htpasswd_stats
<limit GET PUT POST>
require valid-user
</limit>

Why <Limit> is used?
Should not be there just a plain "require valid-user" directive? What if Apache has some other modules which implement HTTP methods which could be used to get the stats?

[till]

I've added this to the bugtracker.