Whistleblowers, sources and confidential information are critical to investigative journalism – but what happens when the law requires they be identified?