That's what I would have thought, but I'm not sure what the auth=digest version of the feed does. That suggests to me that a reader could send an id (openid?) and hashed password to be able to view locked entries via feed. If a feed is only ever unlocked entries, I have no idea what one would want the auth option for.