Never use a bridge-purpose node as an exit
Wanoskarnet found this one. We should be sure that a client can never use a node that's been marked as a bridge anywhere but in the first position of its circuits. Additionally, we should probably treat every bridge's exit policy as "reject :"
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information