Depending on how closely the network admin monitor things, your friend can get caught. And since they've put the packet shapers in for a reason then their response may not be that favourable for your friend.
Trying to encapsulate the traffic won't prevent it being detected. All it needs is a single admin to wonder why there is an incredible amount of traffic going to and fro via SSL or whatever.

Sorry to be pessimistic but if I caught somebody trying this after I told them not to I wouldn't NOT be happy

- Trevor