I'm eager to see what your cooking. =)
I'd recommend deploying Virgil 1:1 w/ Cassandra, one instance per node in the ring. Then you can load balance requests across those Virgil instances. Virgil does not have native security capabilities. To add security, I would front the Virgil instances with Apache web server and lock down requests at that level.
Definitely keep us updated, and let us know if we can help at all.
-brian