DRM is usually implemented at a completely different layer.

No, but DRM is at the container level, so nothing prevents you from adding it.