If this feature is already here then I apologize.
I notice that it is possible to "get around" the protected view if they know exactly where to look, meaning they remove the .php part and add /albums/ to the right spot. I know this can be accomplished using .htaccess, but I'm just throwing this out there.