An individual pdf file can be password encrypted to avoid trivial access.
$ qpdf --encrypt <password> <password> 40 -- mydoc.pdf mydoc_with_pass.pdf