hmm...
i guess then you are using a real folder.
1. add that folder another time (always real folder).
2. if the folder is named "stuff", then call the second "stuff2".
3. hide this stuff2
4. you browse stuff2, and when you have to give the url to someone, you remove the "2" from the url, so they don't know about stuff2
if you want to be more secure, restrict access to stuff2 with a password.
so, even if you forget to remove the "2" it's not a problem.