About authorizing only users with specific attributes (post RADIUS proxy)