Option to secure a specific forum

Two features I would really like so I could use a private "staff" forum for some work that cannot be compromised by an errant link being passed around.

New flag for a forum:
Checkbox on Forum admin for "Secure Attachments"

What it does:
Then, for that forum, any attachments loaded go to ./App_Data/Forum/ForumID/*   (which is by default secured from use from the web interface);

What else has to change:
Download.axd  has to check for that forum right hook and if it is in place, check that the user has rights, then allow access to the file via a binary download
[attachment=X] code will need to use the binary loader too to serve up the graphic

 
New flag for a gallery:
Checkbox on Gallery for "Secure Gallery'

very similar to above - but secure the gallery and force binary downloads after rights checking