locking files from public view


I am using the Shield module to lock our site from public viewers.

However, attachments can still be seen (such as an employee handbook).

This is not okay of course! What can I do to lock all files from public viewers?

yes, they would have to guess the file path, but still, anything can happen!


Drupal version: 

Source: https://www.drupal.org/taxonomy/term/4/feed