How do I stop Storyline output being accessed directly without logging into my LMS?

I'm publishing Storyline 360 content as HTML5 and embedding it into topic pages on a WordPress + LearnDash site (via a third-party WP embed plugin). The LearnDash pages themselves are correctly gated behind login/enrollment — but I've found that the published Storyline output itself sits at a static, predictable file path once uploaded, and can be opened directly with a plain URL, with no login required at all, completely bypassing the LMS.

Is there a standard/recommended way to publish or host Storyline output so it's only ever served to an authenticated, currently-enrolled learner.
Specifically interested in: Whether Storyline/Articulate 360 has a built-in output option for this (vs. plain "Web" publish)

Any guidance from others who've solved this would be much appreciated!
Thank you!
Alice