Any of these mechanical/automatic solutions are going to make "secret" or compartmentalized work even less efficient.

Of course, there's an easy solution to that, and to the greater problem of how to prevent insider threats: limit what you declare "secret" to something far smaller and more manageable.