You hit on a good point: once we have more tools, we need more comprehensive policy & all dataflows needs to be tracked. There's different policies that could

You hit on a good point: once we have more tools, we need more comprehensive policy & all dataflows needs to be tracked. There's different policies that could fix your example. e.g., "don't allow sending secrets over email"