Hot LinkingBrowser Info Environment
With a small modification you can make it so that links to s3 expire, I should probably add that to this addon anyway.
URL tokenizing was what I was thinking about, but couldn't remember the AWS term before posting the original topic.
As long as each user gets a fresh token, this should be perfect.
I might make an interface for it, didn't get that far :)