Can I promise a source confidentiality, even if I know the information was obtained illegally?