The download file server behavior in DFP and UE4 is the key to this, it is what allows you to have files outside of your webroot and still have users download them under your own conditions. This way the files are secure so that someone could not just pass out a url to get at the file.