security assist cannot protect a directory or PDF Files, security assist can only be used to protect php pages.
you should store the pdf files in a directory under the websites root folder so that the files cannot be accessed directly from a web address.
then on the PHP pages, use Security assist to protect access and the file download behavior to download the files.