No, you don't need a new CR type. You can do it with existing CR types.
To derive the value of the flag, you will need to implement a BAdI as described in the document. The difference is that instead of passing a field's value to the BRF+ context, you will read a whole bunch of fields and see if any of them is a sensitive field then set the value in the flag field accordingly.