Stream Video Player plugin

Hy guys,
Can someone help me how to setup via .htaccess some rules?
I am using this player an it is great, you can find it at this address:
http://wordpress.org/plugins/stream-video-player/
I want that nobody to be able to download the files (video, audio, xml subtitles) from the server.
Tried with “denied from all” the video will work but the subtitles won’t.
When accesing direct link to the .xml i couldn’t download it, so this is good, but when accesing the video file i could download it, so this is bad, because the videos are huge, and people could ruin my server bandwidth.
But if i can’t download the .xml file, then it won’t show on the player.
I am having a hard time discovering how to make the files secure but at the same time to work in the player.