additional authentication properties additional authorization properties additional principal attributes