If the site is popular, make sure you have a reverse proxy. Using mod_perl for large static file downloads will not go well. You can look at things like mod_auth_tkt which let you do the auth check on the proxy after logging in on mod_perl.