3. The method of claim 1 comprising: using the policy enforcer, determining if the application program can be trusted to protect unencrypted content of the encrypted document based on a first policy of the plurality of policies stored at the policy server; and the controlling access to the unencrypted content based on the first policy is replaced by if the application program is determined to be trusted, controlling access to the unencrypted content based on the first policy.
3. The method of claim 1 comprising: using the policy enforcer, determining if the application program can be trusted to protect unencrypted content of the encrypted document based on a first policy of the plurality of policies stored at the policy server; and the controlling access to the unencrypted content based on the first policy is replaced by if the application program is determined to be trusted, controlling access to the unencrypted content based on the first policy. 9. The method of claim 3 wherein if the application program is determined to be trusted, decrypting the encrypted document to produce unencrypted content comprises: obtaining an encryption key from the policy enforcer to decrypt the encrypted document.