Well, files are "other stuff" right? I don't know enough about the specifics of the nostr protocol but maybe that could work, no idea how access control could work since it's literally made to be public 🤔