You mention:

"Another good solution is something like IronKey, to protect data in a USB key. That way, its much easier for employees to keep their secure documents on their key ring, and if the laptop gets lost, or if an angry official asks them to unlock it for them, then the USB key may remain in the person's pocket."

That is not possible at airports.