Contoso wants to send emails to external partners that are encrypted so only intended recipients can read them, but the security team specifically requires that recipients can still forward and copy the message content once received. Which Purview Message Encryption protection option should the administrator apply to meet this requirement?