Yeah, the available without login setting is necessary, I believe, similar to image files. Not sure why, exactly, but it must be an access issue when the BFO engine runs to generate the PDF.