Well, this is stuff you can do anyway, but the minute the document leaves a particular server those settings are lost. Including the security settings into the object itself is a hell of a good idea.