I suspect you have come across a flaw in that technique. What those
guys have done is an "include" in the stylesheet, which is a neat
technique. However, it requires the code that is processing the
stylesheet to load another stylesheet file from the document
library. That code is probably generic XML/XSLT transform code that
wasn't written specifically for SharePoint, and just does an http
get of the stylesheet file.
My guess is that the technique will work in some situations (e.g.
Kerberos authentication with impersonation enabled by default, where
the end user's credentials are available) but not others (e.g. NTLM
authentication, with the two hop authentication issue).
This is just my guess, but based on what I have seen in some other
situations. A workaround would be to locate the included xslt file
somewhere it could be accessed anonymously.