An email administrator at a manufacturing company runs a Cisco Secure Email Gateway (ESA) with an on-box spam quarantine. Users complain that legitimate newsletters from a trusted vendor are consistently classified as spam and held in quarantine, forcing them to manually release the messages each week. The administrator wants to empower individual users to ensure that mail from this specific sender always bypasses the anti-spam engine without weakening spam protection for other senders or requiring administrator intervention for each user. Which feature should the administrator enable to meet this requirement?