I think it is safer to assume UTF-8, as this is allowing users to specify passwords.  While it is possible that the service does not allow UTF-8, I would be very surprised.  Most tools you find on the web that use ultradns use UTF-8.  Let's stop bleeding time on this.  We know that not specifying is bad, and it is more risky to constrain something that accepts passwords to ASCII than UTF-8.