Actually in the book, as I recall, the <location> element is added to a separate web.config in the Admin folder.
It works either way, so it's really a matter of preference. I actually prefer to keep roles permissions in the main web.config like you did, as they're easier to maintain that way. Just wanted to mention this in case you refer to the download code and don't see it there.
Visit my blog at
http://leedumond.com