Security assist can only secure PHP files.
the only way to do this with security assist is to place the PDF files outside of the site root so they cannot be accessed by a URL, use the File Download behavior to download the PDF files, and use security assist to restrict access to the page that you have the file download behavior on.