Make use of the X-Sendfile header.

Add in a setting that if the xsend module is enabled then add in this header X-Sendfile:

header('X-Sendfile: '. realpath(file_create_path($filepath)));