Hi,
>
... ...
> and there does not seem to be any way to
> specify them in a file or an option.
In TL 2011, you will be able to specify in a source file like
\AtBeginDvi{\special{pdf:encrypt ownerpw (abc) userpw (xyz) length 128 perm 252}}
Best,
Akira