Hold and release CUPS print jobs from command line

_{(Posting an answer that was edited into the question)}

This is a bug in CUPS. The bug report lists several workarounds:

• Add ServerAlias * to cupsd.conf
• Add ServerAlias servername to cupsd.conf
• Add HostNameLookups On to cupsd.conf

Why not remove the password temporary and print the resulting unsecure pdf with lpr:

pdftk secure.pdf input_pw own output - | lpr

If you don't want that this command is listed in bash command history:

set +x history
<commands>
set -x history

OR

<whitespace><command>

OR use a script (adapted from here):

#!/bin/bash
unset password
prompt="Enter Password:"
while IFS= read -p "$prompt" -r -s -n 1 char; do
    [[ $char == $'\0' ]] && break
    prompt='*'
    password+="$char"
done
pdftk secure.pdf input_pw "$password" output - | lpr

Source for disabling bash history