Hammer and Anvil: A Principled Defense Against Backdoors in Federated Learning