Protected delivery
Why a shared video link is worthless to anyone — the single point the paywall hangs on.
The only question that counts
On a course platform the entire paywall hangs on one question: does a video file ever sit at an address reachable without a check? If the answer is yes, one link in a message is enough and everything else is theatre.
One gate, not a net of rules
In Lyceum exactly one path leads to a video. It checks the entitlement and then hands the file through internally via the web server. There is no second path, no exception, no special case for previews — the preview lesson goes through the same gate, it just answers the check differently.
No countable addresses
All identifiers are random, not sequential. Sequential numbers can be counted up; for public images that is irrelevant, for paid videos it would be total failure.
What this means for you
You configure nothing to make the protection work — but the web server must be able to do the internal hand-through. Without it the gate delivers nothing. That is the one point in Installation you must not skip.