It's not the same, obviously, but one thing you could do is redirect "zfs snapshot" to a file (instead of passing it to "|zfs send"), encrypt that locally (using whatever means you prefer: openssl, gpg, etc.) and then upload that.

Of course, tarsnap pretty much does that all by itself and does it quite well.