It turns out that the other listing types are working, but the category shortcode still isn’t. I was able to get the files hiding properly by adding this to the FetchTemplate function right before the return:
if ($vars['download_link'] == 'Access Denied') return '';