I have a special access groups that I added for access of packages. They require login.
Is that the/an issue? No big issue for me, as I can add single files.. instead of packages.
I just have to reassure that the files I add is not accessible from outside any way.