A financial services company wants documents containing passport numbers and bank account details to be automatically classified and encrypted the moment they are created in SharePoint, without relying on employees to manually apply protection. Which Microsoft Purview capability should they configure to achieve this?