Ghost Solution Suite

I couldn't find anything that implicitly said either way, so here is my question:

We have a sizeable tablet deploy coming up and one of the requirements is to encrypt a single folder and all of its contents. The tablets run XP Tablet Edition and we would like to know if this folder and its contents can be encrypted before capturing it as a base image or should the folder/file encryption be done to each tablet after they recieve a base image? We are looking to use EFS built into Windows.

The tablets are Lenovo X200s
Win XP Tablet Edition
The folder and its contents to be encrypted are located under Program Files.
Going to use EFS

What should we be concerned about if we can do this short of storing the certs somewhere?

Thank you. 

I can't speak specificly to folder but encryption should be left for after the deployment.   Ghost can't read the encryption and as such it can't clone the files in the encrypted folder but will have to do a bit level (ones and zeros) image on these folders if not the entire hard drive that contains the encrypted folder.    If it were the entire drive then the image would be roughly the same size as the drive and would take for ever even if there was only 10% full of data.  
Short answer do it after if you can. 

cheers.