Yeah this would do it and be scalable. However, a user could share the key with a friend to grant access to the content. Dunno how much that would matter in practice.