Require authenticated URLs for user-uploaded files.