What is the recommended network MACSec policy mode for high security deployments?

What is the recommended network MACSec policy mode for high security deployments?
A. should-secure
B. must-not-secure
C. must-secure
D. monitor-only
E. high-impact