Kieran Kelleher has written an excellent article on his blog about performing encryption on an EO attribute via a custom attribute:

http://web.archive.org/20071121050703/homepage.mac.com/kelleherk/iblog/C729512539/E2033071041/index.html