Protect the segments on EMT Channel Assembly

As of now EMT MediaTailor Channel Assembly,is sending request to CDN to fetch the transcoded URL’s for Master and Child Playlist files. Here the .ts Segments will be served directly through CDN to end users.We need to enable the CDN token authentication here on the segments.Please let us know if these is achievable or not ?

We are serving a Non DRM HLS content to end users.How can we protect our .ts segments ?

Current Workflow, Origin <----- CDN <----- EMT <------ Final End CDN <----- End User.