Is it possible to switch on Application Managed Encryption from TSM when performing backups through a NACLASS device (i.e. NDMP backups)?

Everything I've found so far appears to show that you switch it on for the drive Devclass, which for NAS backups you don't have.

Is Library Managed Encryption (Using TKLM to manage the keys) our only option here?

We're running TSM 6.2.1 on Win2k8
Library is a 3584
Drives are ULT3580-TD5
Controlled through NetApp via NDMP

Any help greatfully received!
Thanks