uated in each request where the security runtime needs to use the value of these attributes.
 
 <p>
 Attributes that are documented as being Expression Language alternatives to non-<code>String</code> type attributes
 (attributes for which the name ends with <code>Expression</code>, hereafter called Expression alternative attribute) MUST
 evaluate to the same type as the attribute they are an alternative to. If the Expression alternative attribute has a non
 empty value, it takes precedence over the attribu