Basic implementation of bundle filtering

This patch-set adds classes and routines for bundle filtering. The security checks previously located in the BaseRouter and in the Convergence-Layers has moved to a separate filtering class.