Yeah, you can't do that either. Either a custom domain exposes your objects, or it doesn't. You can't use Signed URLs with your custom domains at all