User-agent: Mozilla Thunderbird 1.0.2 (X11/20050404)
Sorry folks. Figured it out: in httpd.conf it wasn't in the first or
second AllowOverride section (which I had set to All and that's why I
was so gobsmacked) BUT it was in the "Control access to UserDir
directories" section.