How to securise access to /download

Hello,

Is there a way to securise the access to the following paths :

https://myocsserver/download for the info files

http://myocsserver/download for download package

I would like to hide theses directories for users without losing the functionnality of package deployment with the agent (because agent use theses directories to recover info files et package fragments).

I try to use AuthType Basic in my apache vhost and activate in my customsettings.ini AuthRequired=1 with credentials but it return a 401 error (my credentials work fine if i try to go  to the /download page).

Best Regards