Trying desperately to figure this out for my client… One thing I noticed is that if I load all the WPDM packages in an archive (domain.com/?post_type=wpdmpro), it won’t show content – it says it’s password protected and gives a password form. But still, clicking the link there brings me straight to the package page, no password needed.