How to create a protected RSS feed
If you use Views to provide it then you can limit it by role/ permission (which will tie your user to a REST login process), else the Views RSS Feed Authentication module allows you to utilise basic auth or oauth.
There are plenty of options, but what you do will depend on how you intend to implement the feed.