You can make a child-entity of those entities inside the domain model where you intend to use them, by using the Mendix-inheritence way of “generalization / specialization”. When you create a child-entity, or “specialization” of the System.FileDocument  or System.Image, it will have the same attributes immediatly, but you can now change the security rules, give it associations and handle them whichever you want.