Protect file downloads and keep a clear record of who took what — without turning the site into a membership maze.