Even if encryption is not forced at the server, the user can encrypt his/her own incoming mail by selecting Yes in the Encrypt Incoming Mail field of his/her Person document in the Name & Address Book.)