Yep, you nailed it, exactly. Each distributor has its own VPN, and the theater basically buys a "token" that lets them authenticate and then download the movie over dedicated backbone high-speed lines. These tokens contain all of the license information (number of runs, cost per run, even times of the run, depending…