Never use a bridge-purpose node as an exit
Wanoskarnet found this one. We should be sure that a client can never use a node that's been marked as a bridge anywhere but in the first position of its circuits. Additionally, we should probably treat every bridge's exit policy as "reject :"