1. A client device, comprising: a network interface to receive content over a network; and one or more processors that perform actions, including: installing onto the client device an interceptor application that is arranged to perform actions, including: monitoring whether the client device is offline or online with respect to network communications with a remote key management device (KMD) that manages content decryption keys and licenses, wherein the client device is offline with the KMD if communications between the client device and the KMD are unable to occur and the client device is online with the KMD if communications between the client device and the KMD are able to occur; when it is determined that the client device is online with the KMD: obtaining a content decryption key or license for protected content from the KMD; selectively providing the content decryption key or license obtained from the KMD to a digital rights management (DRM) module on the client device, such that the DRM module uses the content decryption key or license to decrypt at least a portion of the protected content for play by the client device; securely storing in a local store of the client device the content decryption key or license; and when it is determined that the client device is offline to the KMD: intercepting, by the interceptor application, a request for the content decryption key or license from the DRM module to the KMD, the DRM module being unaware whether the client device is offline or online; and selectively providing the stored content decryption key or license to the DRM module from the local store, such that the DRM module uses the content decryption key or license to decrypt at least a portion of the protected content for play by the client device.