Package: @strapi/provider-upload-local

I am only allowing api access to authenticated users, but this does not work with the local upload provider as all files are public. I should be able to require an api key