Primetime Origin supports ingest of AES-128 encrypted HLS Stream. No JIT transformations will be performed on such streams. Origin Server only takes care of ensuring disk management of published segments as per the duration of published m3u8. Primetime Origin does not provide key hosting for AES-128 encrypted content. Key will have to be securely delivered through a separate key server which takes care of secure key delivery and client authentication.