you could setup lighttpd with mod_secdownload so the urls expire ever x amount of seconds, would prevent leeching.
i setup this exact setup in about 15 mins after figuring everything out, and its easy to implement into a flash player.
or you could have a stab at mod_auth_token which does it for apache
http://code.google.com/p/mod-auth-token/