I'm pretty sure, that all of this can be achieved by bootup or contextual scripts (that automatically restart corresponding services after mounting encrypted partition/container). Ho ever, as for IM bug, we must wait for NIN101 answer - he's specialist of such trick.

Sorry for not being able to help on that.