Contoso created a custom sensitive information type (SIT) to detect internal project codes formatted as three uppercase letters followed by a hyphen and five digits. During testing, a DLP policy using this SIT is generating too many false positives because it matches unrelated text strings that happen to fit the pattern. The security team wants to reduce false positives without abandoning the custom SIT. What should they do?