organic groups and private files
For anyone attempting something similar I ultimately modified the user files module
and used the hook_file_download to only allow group members to download protected content by using the built in is_og_group_member function.