By default, currently tagging is not possible when Protected mode is activated. For security matters, would need to use tagging with protected mode. The goal is to classify confidential documents, to use tagging to filter/intercept via DLP (~intelligent firewall based on analysis of content), and prevent documents to be moved on external storage.