Yeah, the problem is that a robots.txt file is browsable to the end user. i.e.
http://www.bbc.co.uk/robots.txt
Which means that any inquisitive user can just have a quick look at one file to find anything that I don't want them to see (yet !).
Will the robots meta data hide the folder path (
www.mysite.co/folder1/) as well as the direct url (
www.mysite.co/folder1/default.asp) if I only put one page into that folder?