Content added via a custom field does not get protected

I have a custom field that is being used to provide a URL to a file download. I'm using the default wp-content/uploads folder and I chose complete protection and gave it a new folder which I created.

The URL never gets re-written, how can I get this to work with custom fields?