I'm looking around at some simple options for managing a WP install where all media and content is unavailable unless you are authenticated. Most plug-ins I have so far have resulted in once you have the link to a media file it is directly available if you post the link publicly / share it.

Going down the IP lockout route isn't appropriate, and it has to tie into the standard WP authentication page to allow others to administer users.

Any advice appreciated.