A method, apparatus, and article of manufacture provide the ability to securely distribute digital media content from a first entity to a second entity through an intermediate entity. A studio token, comprising information utilized to generate a first key, is generated and distributed to the first entity. A theater token, comprising information utilized to generate a second key, is also generated and then distributed to the second entity. A data file is accepted from the first entity. The data file comprises the media content encrypted according to the first key generated from the studio token, and an authorization header that provides information utilized to generate the second key. The data file is further encrypted according to a third key wherein such further encryption comprises adding a new header to the encrypted media content. The encrypted data file is then distributed to the second entity.