You have been tasked with setting up a Gmail configuration that allows managers to send encrypted emails containing sensitive data to external partners. However, employees should not have the ability to send encrypted emails. Which approach should you take?