This extends the admin files so that they will ask for a username/password like they were protected by a .htaccess file.
This way, a hacker can compromise your board but without the extra username/password he can not access the admin area.
This will prevent him from doing most of the really ugly things he wants to do.