Yes, you can use LLQ like you do over regular links. To mark the packets before they are encrypted use qos pre-classify command under the crypto map and the tunnel interface - - if I remember this correct...
Sankar Nair
UC Solutions Architect
Pacific Northwest | CDW
CCIE Collaboration #17135 Emeritus