The nice thing about SQL Server Compact is the database can be treated as a document. It's a single file, it's only "open" when being used and can use the standard set of security mechanisms that any other document can. You can set ACLs on the files,