As Sec State, she has a limited authority to declassify certain things. However, that would follow a regulated protocol. Casually using a private email server

As Sec State, she has a limited authority to declassify certain things. However, that would follow a regulated protocol. Casually using a private email server for state business - that act in itself is illegal. It contravenes records laws and regulations, and is a direct afront to transparency. Also, it is not part of any declassification protocol. Just because a Sec State has power does not mean they have the authority to do something any way they please. This is the essence of Rule of Law.