A legal firm wants to automatically classify documents that contain confidential case information and apply encryption plus a visual watermark so the protection travels with the files even when they are shared outside the organization. Which Microsoft Purview capability should they use?