Access to private file preview uploaded by anonymous user

Re-roll #2 for 7.x-2.37

This change looks good, I just haven't had a chance to test it myself. If we get some additional reviews or if someone checks to see if our currently existing test coverage already handles testing that anonymous can't access other private files , then I'd be convinced to include it.

Pipeline is passing