The Clean Source Principle and the Future of Identity Security