In a now resolved thread, it was advised to use IB's SLL. I haven't used it up until now because of some vague recollection of problems mentioned in the past.
IB encrypts our password info anyway but the SSL option appears to encrypt order info too:
"For added security, use Secure Socket...