Disabling mod_auth_mellon for a sub-url

[prsf1233]

I am protecting the root of my Apache server and this is working as expected. I want enable mod_status on Apache to be able to scrape web server statistics remotely and hence need to disable mod_auth_mellon. I have the location block configured as:

<Location /server-status>
AuthType "Mellon"
MellonEnable "off"
SetHandler server-status
Order deny,allow
Deny from all
Allow from 35.161.79.165

When I try and access /server-status I get blocked because I am not a valid user. Any suggestions?

[prsf1233]

I had an erroneous Directive in the Location block, commented out the Order and Deny and it works correctly.

[prsf1233]

Actually it now allows from anywhere!