I'll update this with anything I learn, since I see EFS being use much more as time goes on.

There is little information outside of the Security docs and one other small mention.
I am using a virtual loaner at IBM to test this stuff out.

Has anyone worked with this feature?

This is my first time implementing Role based accounting and all seems to have gone well. I can manually login as a non-root  user and open/create files. The keystores are loading and other in the group are also able to read/write based on the appropriate roles.

The snag I have is the login scripting for my application calls other shells and when that happens the keys are lost. Any ideas on how to do this properly so that when one script calls another or leads to another the encryption keys get loaded into the new session?

This has to work in a HIPAA environment requiring all data in any state to be encrypted (yah, I know that is impossible if you want to do something with  it).