OK if I wanted to limit external engineering (or other) access to a DMZ Vault yet have the Production (Final) versions in the Internal (More Secure) Vault, how might I best set that up?  Can a Workflow in the DMZ Vault be set up to move files to the Internal Vault at a certain Life Cycle state?