A team encrypts its knowledge store but allows every application user to retrieve all documents. Which requirement remains unmet?

1. Only a different answer tone.
2. Only a longer encryption key alias.
3. Only a larger model context window.
4. Document-level authorization and appropriate data-access boundaries.