By all accounts - and so far there's no rebuttal of this - the National Archives staff became suspicious and tracked his document filching over several visits. So presumably they saw him stuffing docs into his jacket and pants and socks.
But they're following procedure and giving him nondisclosures and affidavits to sign, and then watching him commit perjury (lying on a federal nondisclosure and other docs).
Honestly, they must have thought the former National Security Advisor had flipped his wig. As in, stark raving nutso.
Why do I get the impression that the Clinton crime syndicate set this poor dolt up? Clearly, the guy's expendable.