Restrict PDF Copying via Purview

I have a single PDF that must stay in-house. Using Microsoft Purview Information Protection, I need a sensitivity label (or other native control you recommend) applied so that copying is blocked completely. Printing and forwarding should also be disabled, but the absolute priority is to stop any form of copy ,extract or forwarding from the file.

Please configure the policy, apply it to a test PDF, and provide a short walkthrough so I can repeat the process on future documents. This is an immediate requirement, so I’m ready to move as soon as you are.