Currently feeds are relying on a virtual uri rewrite, so even passing credentials in the url does not work for forums that require authentication.
How do other systems do this ?

Netnewswire allows users to add username/password to the feed (using http simple auth I believe), but unfortunately, hitting a protected feed returns a blank page. Perhaps returning a 401 http code would do ?