Are there Wdesk best practices for conducting projects under Attorney-Client Privilege beyond the normal set of Owner, Editor, Viewer permissions?

Can there be...

• Project folder level security?
• Document or project passwords?
• P&C issues filtered from "normal" issue reports?

Thanks for any tips you can offer.