"Action to take" for "Encrypted file rule" does not act as configured