Experimental Quantum Key Distribution Secure Against Malicious Devices