'Must encrypt' could indeed be a solution, provided that we explain to employees that in some cases email encryption can be triggered automatically, even if they do not force it by adding a keyword to the message subject. Thanks again!