Comment by esafak

Perhaps they could use an encryption program that uses the sanctioned app as the transport layer. Like how people used to use PGP with email.