restrict suspicious attachments