I'd be controlling the tracker, and only allow peers for each piece of media if that client actually owned the item.