If you decide to playback video in your player to read the manifest file (m3u8) and want to use the privacy feature with a session token, this is for you.

On iOS and macOS, you can't change requests made by the player to add a private session token without using a service worker.

This how-to will show you how to handle this situation properly:
https://github.com/apivideo/private-videos-with-custom-player-sample