Password Protecting Files

Hello,

It is great that we can password protect resources. But if there is a file download on a protected page, such as a PDF, is there a way to protect them? If someone gives out the path to someone else, the file could just be downloaded directly.

So I will use the Static Resource method for now, and link to files in a folder hidden with robots.txt and with a peculiar name.