Implementing Company Classification Policy with the S/MIME Security Label