A Drupal module in which access to managed files can be restricted by user, role or simply those with the link (which really isn't very private).