Can a endpoint agent block a sensitive file being written to its Network file share?