Macboy, the images are on his server. The clients' servers are linking to them from their server. .htaccess SHOULD work.
if you add
Code:
allow from <first client's domain>
allow from <second client's domain>
deny from all
it will only allow connections from those domains.