I've activated/installed the wowza secure token on a stream. So far it works. I can't play the stream in a player without specifying the key in the HTML source code.

However, I can easily play the stream in VLC when I use the full rtsp or .m3u8 link.

Anyone have any experience on this? Is this a Wowza issue? Or VLC? How can I protect my secure streams from being played on VLC?

Any help would be appreciated.