Whatever you can stream you can download, generally quite easily. I don't think there's any streaming protocol that hasn't been hacked yet for downloading purposes, but I could be wrong. To deter newbies, embed a player and set a property to disable save as. Use a protocol like RTSP/MMS, not HTTP.