It is possible to do this, you can get DWDM transmission equipment with encryption built in, I assume some submarine cable capacity purchasers make use of this, but is raises the cost by a decent amount.