Extend auto classification policies to compressed files (content within the zip) as well and have shield policies be able to enforce rules established for certain classifications. If something inside the unprotected compressed file is detected according to the auto classification policies, apply the same classification to the compressed file so the shield policies are adhered to.

Without this, shield policies can be bypassed by simply zipping a file that would have triggered shield policy as the scan doesn't currently scan files within the compressed file.