1. A computer-implemented method comprising: encrypting data segments of a media file having an arbitrary content type to provide encrypted data segments; and adding descriptors to the encrypted data segments, each encrypted data segment's descriptor indicating an associated digital rights management policy for the encrypted data segment and Key ID usable to decrypt the encrypted data segment.