So I'd have to do another .cgi that's just for passing users the files?

Possible, but inefficient, and if it's a large site, it will add a lot to your server's load. I'd create a separate directory, and tell my webserver to force the content type for all files in it.

If you have Apache (1.3), have a look at the ForceType directive.

Yes, I reinvent wheels.