Thanks, @Philip Büchler, I'm testing removing the classification label as you suggested with a File Policy, but that seems to take a very long time since I assume it only triggers once the file is scanned at some point in the future after it has been uploaded.  My download policy that applies the label is a Session Policy which does it on demand.  I was hoping there was a way to use those same File Policy Governance actions in a Session Policy so it would trigger immediately.  

 

Any other thoughts on how this might be done closer to real-time?

www.000webhost.com