I am using the Shield module to lock our site from public viewers.
However, attachments can still be seen (such as an employee handbook).
This is not okay of course! What can I do to lock all files from public viewers?
yes, they would have to guess the file path, but still, anything can happen!