meta robots and robots txt

I think I have this right but would be grateful if somebody could confirm.

I upload prototype sites for my clients. I used to put them in a sub
directory of my site ( so www.cyberpress.biz/john/ ) and put
<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">
in the head of the html (every page).

I have made a sub-domain called 'demo' specifically for uploading
proto-sites and work in progress. I don't want them to mess up the
google returns for my site and my clients won't want...

meta robots and robots txt