def _should_encrypt_archive(archive):
    """Returns true iff the output of the supplied classified directory should be encrypted"""
    return archive.protection in ('secret', 'confidential', 'restricted')