I'm really liking the external AES system as a method for reporting and controlling access.
But I see one issue, with Android, both stagefright and other player apps such as MX Player will get the key only once, when the stream is started.
I did some experimenting with writing my own chunklists, and adding a random variable in the URL, this forces the key to be re-requested.
I suppose because the key URL is identical, the player does not bother to make a request. I tried to make sure there is no caching allowed on the file on my server, it did not matter, there is only one request logged.
So, this could be solved by adding a random variable in the URL that Wowza puts in the chunklist :)
This will probably be quite useful the day rotating keys are implemented!