Better late than sorry. I have an update about this. Unfortunately this is not possible. We've tried this with the Exchange Online Protection/Email Encryption. There is no API available for this. It kept blocking our implementation so far.
We're looking right now into some alternatives like SmartLockr.