Clarifying replays permissions for attendees

Hi, We are considering using zoom for our class streaming schedule. We want the attendees to be able to WATCH the replay, but not download it or the transcript. Where is that set in the permissions for the webinar events?

Also, confirming, each attendee will have to register through Zoom to ensure only those with the login can view - to prevent one person in a company from attending, and then sharing with 100 who can attend - unless they share their zoom login (bad idea).