Basic Media Protection Rewrite

The basic media protection type does not set a rewrite rule, but it does change the url to the mask in the downloads setting. As such, it causes all media to 404.

Please advise.