on a per-dir or per-filespec basis.  Allowed keys are:
ErrorDirectory	- Changes the dir error pages are served from
CGIDirectory	- Changes the CGIDorectory value
ARS		- ARS required for this resource (Overrides access.ars)
Realm		- Authentication realm name to send to remote

Filespecs are the section name and the first match wins.  So:
[*.cgi]
Realm=CGI Scripts

[*.*]
ARS=Level 90

Would mean that for CGI scripts, the ARS would not apply.

And:
[*.*]
ARS Level 90

[*.cgi]
Realm=CGI Scripts

Would never set the Realm name.