I tried to reproduce the issue on a 5.0.5 server.
initially I can reproduce the issue 100%
after careful investigation, enable rewrite log etc, my test hadn't enable AllowOverride for "Limit", this results
deny from all
is completely ignored.
the official document...