v3 consent to attribute release : "always require consent" ?

[Tom Zeller]

> ... as something like an AttributeRule to a PolicyRule as needed.

Just a note that in v3, attribute consent is separate from attribute
filtering (attribute-filter.xml). Attribute consent operates on the
set of attributes returned from the resolver and filter, and there
will be a whitelist/blacklist/regex to control the attributes
presented to the user for consent, but configuration will be done
separately.