I haven't tried this before on a publish instance, but can you try this?
configure Apache Sling Authentication Service
on ConfigMgr, check the allow anonymous access, and add your content path in the "Authentication requirements" property. Make sure you add a minus sign before the path.
Thank you,
-Sravan