Your organization requires that any incoming email with sensitive information should be automatically encrypted and moved to a specific folder in Gmail for review by a compliance team. As a Google Workspace Administrator, which of the following methods would correctly achieve this?