I'm now able to build trees to share an encryption key to a set of authorized devices (if you know the AACS scheme, it's the part that's used to derive the processing key in a media key block).
Blog article coming when it's done™