There isn't that much statutory groundwork to support charges and what there is says an agency head "is assumed to be acting under executive authority", i.e. as the arm of the President.
The Congressional Research Service wrote a rather helpful summary[1] of the myriad aspects of classification and law.
[1] https://www.fas.org/sgp/crs/secrecy/RS21900.pdf
But yeah, if you or I were to do what she did, big difference - just not all because of politics.