Anyone doing Domino mail encryption?

Looking at the doc on encrypting outgoing internet mail from the Notes client, it doesnt seem very transparent to set up for the user.

There is also the question of admin overhead with a DOmino CA vs cost of buying third party certs.

Has anyone tried this on a high volume user scale? If so, did you do it via straight Notes or with 3rd party app?

thx