Lighttpd

Hi,

I'm using this as 10-ssl.conf, but the auth.require appears to be
ineffective (it's served without authentication request).
I don't get errors during startup.
Does anyone know what's wrong with this?

$SERVERsocket == "0.0.0.0:443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/server.pem"

status.status-url = "/server-status" 
    status.config-url = "/server-config"

auth.backend = "htdigest" 
    auth.backend.htdigest.userfile = "/etc/lighttpd/digest" 
    auth.require = (
        "/server-config" =>
        (
            "method"  => "digest",
            "realm"   => "Protected",
            "require" => "valid-user" 
        ),
        "/server-status" =>
        (
            "method"  => "digest",
            "realm"   => "Protected",
            "require" => "valid-user" 
        )
    )
}