保护Django中未登录用户的静态文件

I have an existing site with a number of documents being served staticly. Client wants to add login protection to the site - not a problem using django_auth. However, the files being served from apache are still downloadable?I have an existing site with a number of docume