Secure and Policy-Compliant Source Routing