You will protect the original link with Prevent Direct Access Gold.
So only admin users can see and access the protected files.
Then you create a private download links with custom slug to prevent users from guessing the file URL and insert it into content.
The private download links are accessible to anyone who has the links.
Below is a sample private download link.