[kovidgoyal]

You cant have both anonymous and non-anonymous access. If you want anonymous access, then simply create a special library and expose it. If you want authenticated access then define restirctions per user.