Constrain entries to have at most one source

This is mandated by RFC 4287, section 4.1.2.