1. A method of controlling access to one or more resources in accordance with a policy, the method comprising: receiving a request to allow a source to access one of the resources; and if the request is allowable under the policy, and if execution of the request will not result in a circumstance under which the source can use a virtual address to address a resource to which access is unallowable under the policy, then allowing the request.