I've created a proposal for making additional attributes available for authorization decisions: