Policy, privacy and post-quantum: anonymous credentials for everyone