forcing user to use strong auth

[Beast <beast@setuid.com>]

Hi all,

How to force user to user encrypted session only (never allow plain mode)?
forcing means on the server side, not client side.
TIA