I actually thought of this. You could put the key on the disc, or publish it, or include it as a file on the disc in a standard location. But no dice: it turns out the encryption is managed entirely by the replication plant. The plant makes the encrypted golden image from the unencrypted image you give them and even you, the disc author, never get to see the keys.