Not Perl, but why not do something like:

<LocationMatch  /user/>
   <Limit GET>
         order allow,deny
         deny from all
    </Limit>
    AllowOverride None
</LocationMatch>

<LocationMatch  /user/prot/>
   Override all the stuff above
</LocationMatch>
[download]