Updated Security spec based on having a security Toolbar button in Mail Compose. The Toolbar security icon seems the best way to go since it makes the feature more discoverable without disturbing the attachment area.
http://www.mozilla.org/mailnews/specs/security/
