I can't find a single reference to anything; however, when 6.8 SP1 came out, I remember the release notes saying there was an -sge switch to install Bootworks on a machine encrypted with Utimaco Safeguard. All references are gone and newer release notes and documentation do not include an -sge switch; HOWEVER, I just tried using that switch today with a DOS EBW and it worked. I was able to embed a DOS Bootworks partition on an encrypted drive and use it. I could not embed a WinPE AP though.
If you look in the KB you will find 2 design request changes - 1 to have Bootworks determine whether Safeguard is on the system instead of using the -sge, and 1 for the -sge switch to work with a WinPE partition.
So the question becomes, if it is there, why isn't it in any documentation? Is there a problem with it, or is it a forgotten feature?