It's not clear what the recipient should make of a a resource with multiple confidentiality labels and single-confidentiality label is a requirement that also applies in other similar DS4P IGs and related specifications. However, it is important to clarify that unlike sensitivity labels that are tied to the clinical content of a resource, confidentiality labels are context- and policy-dependent. Will add language to convey that assignment of confidentiality can (and in many cases should) take place in a context-dependent fashion, for example, on-the-fly and per-transaction as data is being released to a client.