PdfViewer downloads the file content instead of a preview ; we cant apply a download security policy on it

On PVH, we want to be able for some users (permission based) to see a preview of a pdf file inside the pdf viewer ; it could be a specific rendition with watermark.
But we want to prevent the same users to download the content of the file.
To do so, we implement a download security policy based on the permissions. The API is secured. But it prevents the pdf viewer to display the PDF.

As a result, the PDF viewer appears 'broken'.
We just want to prevent the user to download the main version of the file and redirect it to a different rendition.

We want to be able to display a different rendition, different from 'nxfile', like 'preview' so we can filter the access at the API level and the UI