Well, it is possible. They'd need to write an IMAP proxy which can run on the end users machine which sits inbetween the client and the server and handles the encryption/decryption transparently.