Sounds like a simple solution would to duplicate the headers in the body and encrypt them along with the message. That way, even if you resend that email, the encrypted To: field would make it obvious that it was meant only for you.