how do i restrict access, or block downloads, from my upload directory for non-subscribers?

The client uploaded meeting minutes to the library and when they did a google search for meeting minutes it showed up and people were able to download even though it was on a password protected site.