We got a word of confirmation from John Mueller, a Google employee, that Google +1 button will enable pages to being seen or getting indexed even if those pages are blocked in "robots.txt" file.
...if you put a +1 button on your pages, we assume that you're ok with us accessing the pages, even if they're blocked by a robots.txt file. In general, users don't know about robots.txt files, so they may +1 or reshare any URL if they find it interesting enough... [reference]

He also added that if we intend to block unverified users from re-sharing and accessing the private content we should use server-side authentication.. Because of this behaviour, it is important that we use proper canonicalization (again, don't use the robots.txt for canonicalization as advised). More information about +1 button
here.