tokenauth

if you used a personalized token for each user like tokenauth module provides, then you could hand this feed out more freely since all node_access rules would be in force. users would actually be authenticated and receiving their own node list.