Or double encryption with one key held by Google on an HSM enforced time-out so the email does self destruct.