I think the permission idea is good for my scenario.
It is possible that there will be a few users of the BBB once I'm done with it, and I don't want any of them to easily be able to make any changes.
The script at boot time is good too, and sounds easy enough. The GPIO pins I will be using will remain constant, so this may be the way I go for pin declarations.
Thanks!