How do you determine the appropriate merge policies when designing an identity graph for a client with multiple conflicting data sources?