I wonder ... can you use javascript in HTML email ? Why not just include a PGP client ? You'd still need your key but why not make a standard for that ?