[support] bots getting past password protection

[Don]

Hi,
This might be a little OT, but might be a common problem too.
I'm using the Auth protection in .htaccess to password protect 
development sites. I'm using Apache 2.2

For some reason, the pages in these site are showing up in search 
results, even though theoretically protected. Has anyone else seen this 
problem and found a way to block them?

Thanks.
-Don-